000000000 R09: 0000000000000000 [ 2477.509603][T26671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2477.509615][T26671] R13: 00007ffe5796228f R14: 00007f5e11dcc300 R15: 0000000000022000 21:01:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xfb9, 0x0, 0xff, 0x2, 0x7, "f7889cee4ba76300e879e308c4a919510d98f0"}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)={0x8000, 0x2}) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000140)=""/41) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/144) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x400, 0xf, "612a5d1583f9e66439b9b70e9bbb0b55e8a121"}) 21:01:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f00000000c0)="aba21e481e5c6722328aa5b8017a0d6e3b0b4702a90ba9e69dca1b3211d3672a8cc0217d41c08d7987f102b9abcd2399c3fc8c451fa96381b358f6408a69cad240f6db2fd6db5bdb25c2fe4b19a0a6e3ffb0e87f276dbf38396e4432bb51b36859a594b3db6ba6b417739e8ee28bb853b6dfd0f4d1201bdf3736acb7489dca955049377a0abb3df8b0e6900dba5c023308c0ed3b8f9939") 21:01:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x2, &(0x7f00000000c0)) 21:01:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:01:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r3, 0x2f, 0x1, 0xfb, 0x75f3, 0x6, @remote, @mcast1, 0x40, 0x8000, 0x10000, 0xffff36e0}}) syz_open_pts(0xffffffffffffffff, 0x40800) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, 0xfffffffffffffffd) 21:01:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f00000000c0)) 21:01:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f0000000200)="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") 21:01:59 executing program 2: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8404000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004054) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:01:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b2f, &(0x7f00000000c0)) 21:01:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b32, &(0x7f00000000c0)) 21:01:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b41, &(0x7f00000000c0)) 21:01:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x1000}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) mq_getsetattr(r2, &(0x7f00000000c0)={0x9, 0xfffffffffffeffff, 0x3, 0x6}, &(0x7f0000000100)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/104) 21:01:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:01:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b34, &(0x7f00000000c0)) 21:01:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x805) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0xc58, 0x0, 0x3}}) 21:01:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b30, &(0x7f00000000c0)) 21:01:59 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x5609, &(0x7f0000000000)="f411af4fa5df067d49a8bde652b852bd90ad") r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fb0700ff0700000800050000000000140402005967310000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004090}, 0x4080) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c804}, 0x40000) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000001c0)) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) 21:01:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4b}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) 21:01:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b45, &(0x7f00000000c0)) 21:01:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b35, &(0x7f00000000c0)) 21:01:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b32, &(0x7f00000000c0)) 21:01:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$vcsn(&(0x7f0000000800), 0x1, 0x2040) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000840)=""/251) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000940)="b1d0c835d70d9de5b5580630c64df6ad610bf5887f6b4df518c055ced249bb2b66cdc93a87a2745cd62bfd60eff53d1dcc936cefc9c4dc3b812032d09aeb974b8963761ed97b6bd0ea04763c68cd06ceacc286ec36ad278e90c7778221b2b907f50622cdc55e2e8ede3066a0ce406200407cc82f94770c6f733c10f0bc3de94c242f174f79b33ba727e68639fd272211035156474678e5e6ba27779cc301da96476cbf4779974e16eec649427262a8218c65f4f6efd87ed08729372802d6") sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x25b}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffd, 0xc9, 0x7, @scatter={0x7, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/1, 0x1}, {&(0x7f00000000c0)=""/222, 0xde}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000440)=""/156, 0x9c}]}, &(0x7f0000000580)="5f01520fdac81e2b6354a0d2459917448f50ffbafe28d61ea9c2d1cbdd63910c40a33ebd3e56e936c6371ff8dd1c2af2111f5cd3cf18727892757eb3251b2d1079bad806bfad676ee123230a8466db06234f16adceba8b1f108e67d53732fe041cd3c55ff2ef1da72bcb901ef8e6d6678272d5bf8156988b12c2224f1a36b57f1ac8c5110b892393def31ee6030ca88eb36a30758e084cf369c1df7395ee35ab8efee89160844ce19746cd190ee79240065b649b4c22f48a881878086e3fa8b73720746157de4d23b8", &(0x7f0000000680)=""/190, 0x6, 0x10003, 0x1, &(0x7f0000000740)}) 21:01:59 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:01:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b46, &(0x7f00000000c0)) 21:01:59 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x3, 0x7d23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x700, 0x2a9abad254e623f7, 0x81, 0x3f}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x5609, &(0x7f00000000c0)) 21:01:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b36, &(0x7f00000000c0)) 21:02:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)) 21:02:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b37, &(0x7f00000000c0)) [ 2478.124030][T26792] FAULT_INJECTION: forcing a failure. [ 2478.124030][T26792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2478.137281][T26792] CPU: 0 PID: 26792 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2478.145807][T26792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.155952][T26792] Call Trace: [ 2478.159350][T26792] dump_stack_lvl+0xb7/0x103 [ 2478.163944][T26792] dump_stack+0x11/0x1a [ 2478.168246][T26792] should_fail+0x23c/0x250 21:02:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b48, &(0x7f00000000c0)) 21:02:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) [ 2478.172897][T26792] __alloc_pages+0x102/0x320 [ 2478.177495][T26792] alloc_pages+0x2e8/0x340 [ 2478.177571][T26792] pte_alloc_one+0x29/0xb0 [ 2478.177592][T26792] __pte_alloc+0x2f/0x210 [ 2478.177614][T26792] do_anonymous_page+0x79b/0x8a0 [ 2478.177632][T26792] handle_mm_fault+0x98f/0x1a50 [ 2478.177652][T26792] do_user_addr_fault+0x609/0xbe0 [ 2478.177669][T26792] exc_page_fault+0x91/0x220 [ 2478.177739][T26792] asm_exc_page_fault+0x1e/0x30 [ 2478.177762][T26792] RIP: 0010:__put_user_nocheck_4+0x3/0x11 21:02:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b34, &(0x7f00000000c0)) 21:02:00 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b49, &(0x7f00000000c0)) [ 2478.220768][T26792] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2478.220844][T26792] RSP: 0018:ffffc9000ff0fb88 EFLAGS: 00010297 [ 2478.220861][T26792] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200000c0 [ 2478.220874][T26792] RDX: ffffc9000e9b6000 RSI: 000000000000003b RDI: 000000000000003c [ 2478.220888][T26792] RBP: ffffc9000ff0fdf0 R08: ffffffff81af3134 R09: ffffffff81aea9d7 [ 2478.220900][T26792] R10: 0000000000000039 R11: ffff888107960040 R12: 0000000000004b44 [ 2478.220913][T26792] R13: ffff888107960040 R14: 00000000200000c0 R15: ffff888100329c00 [ 2478.220927][T26792] ? vt_ioctl+0xe7/0x2060 [ 2478.220966][T26792] ? vt_do_kdgkbmode+0x34/0x60 [ 2478.221038][T26792] vt_ioctl+0x605/0x2060 [ 2478.221060][T26792] ? terminate_walk+0x263/0x280 [ 2478.221083][T26792] ? path_openat+0x18e4/0x1f20 [ 2478.221105][T26792] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2478.221123][T26792] ? do_filp_open+0x18a/0x200 [ 2478.221177][T26792] ? fsnotify_perm+0x59/0x2e0 [ 2478.221245][T26792] ? __fsnotify_parent+0x32f/0x430 [ 2478.221307][T26792] ? tty_jobctrl_ioctl+0x100/0x900 [ 2478.221327][T26792] tty_ioctl+0xa24/0x1120 [ 2478.221385][T26792] ? selinux_file_ioctl+0x8e0/0x970 [ 2478.221407][T26792] ? do_vfs_ioctl+0x7c2/0x1410 [ 2478.221424][T26792] ? __lookup_mnt+0xb4/0xf0 [ 2478.221443][T26792] ? tty_get_icount+0x70/0x70 [ 2478.221458][T26792] __se_sys_ioctl+0xcb/0x140 [ 2478.221548][T26792] __x64_sys_ioctl+0x3f/0x50 [ 2478.221566][T26792] do_syscall_64+0x3d/0x90 [ 2478.221586][T26792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2478.221611][T26792] RIP: 0033:0x4665d9 [ 2478.221623][T26792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.221638][T26792] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2478.221655][T26792] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2478.221705][T26792] RDX: 00000000200000c0 RSI: 0000000000004b44 RDI: 0000000000000003 [ 2478.221717][T26792] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.221728][T26792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2478.221739][T26792] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 [ 2478.325447][T26822] FAULT_INJECTION: forcing a failure. [ 2478.325447][T26822] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.531368][T26822] CPU: 0 PID: 26822 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 21:02:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x20000) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/243) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x9, 0x89, 0x4, 0x0, 0x10}}) 21:02:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3a, &(0x7f00000000c0)) [ 2478.531395][T26822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.531404][T26822] Call Trace: [ 2478.531411][T26822] dump_stack_lvl+0xb7/0x103 [ 2478.531432][T26822] dump_stack+0x11/0x1a [ 2478.531447][T26822] should_fail+0x23c/0x250 [ 2478.531481][T26822] ? __anon_vma_prepare+0x41/0x2d0 [ 2478.571477][T26822] __should_failslab+0x81/0x90 [ 2478.571496][T26822] should_failslab+0x5/0x20 [ 2478.571555][T26822] kmem_cache_alloc+0x46/0x2e0 [ 2478.571569][T26822] ? pte_alloc_one+0x84/0xb0 [ 2478.571580][T26822] __anon_vma_prepare+0x41/0x2d0 21:02:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4a, &(0x7f00000000c0)) [ 2478.571594][T26822] do_anonymous_page+0x7bc/0x8a0 [ 2478.571605][T26822] handle_mm_fault+0x98f/0x1a50 [ 2478.571615][T26822] do_user_addr_fault+0x609/0xbe0 [ 2478.571703][T26822] exc_page_fault+0x91/0x220 [ 2478.571726][T26822] asm_exc_page_fault+0x1e/0x30 [ 2478.619817][T26822] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2478.619894][T26822] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f 21:02:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f0000000000)="7485dda5207aece15a0c6b8487d02b9acb576e96aa7bcc439de3f22790fa375f1a5f5071c2e286c76f413d67253609efb565389244fa26c214758d353aecb53490fa2188fdacf4ac51ced0a0e76400bb997d7e07f3b5f8516a789bc8275eb050e22be8ec") syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:02:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b35, &(0x7f00000000c0)) 21:02:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) [ 2478.619910][T26822] RSP: 0018:ffffc9000fef3b88 EFLAGS: 00010297 [ 2478.619925][T26822] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200000c0 [ 2478.619936][T26822] RDX: ffffc9000e9b6000 RSI: 000000000000003b RDI: 000000000000003c [ 2478.619947][T26822] RBP: ffffc9000fef3df0 R08: ffffffff81af3134 R09: ffffffff81aea9d7 [ 2478.619960][T26822] R10: 0000000000000039 R11: ffff888111e93000 R12: 0000000000004b44 [ 2478.619973][T26822] R13: ffff888111e93000 R14: 00000000200000c0 R15: ffff888100329c00 [ 2478.619986][T26822] ? vt_ioctl+0xe7/0x2060 21:02:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b36, &(0x7f00000000c0)) [ 2478.695778][T26822] ? vt_do_kdgkbmode+0x34/0x60 [ 2478.700554][T26822] vt_ioctl+0x605/0x2060 [ 2478.704804][T26822] ? terminate_walk+0x263/0x280 [ 2478.709746][T26822] ? path_openat+0x18e4/0x1f20 [ 2478.714549][T26822] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2478.720184][T26822] ? do_filp_open+0x18a/0x200 [ 2478.724868][T26822] ? fsnotify_perm+0x59/0x2e0 [ 2478.729654][T26822] ? __fsnotify_parent+0x32f/0x430 [ 2478.734772][T26822] ? tty_jobctrl_ioctl+0x100/0x900 [ 2478.739921][T26822] tty_ioctl+0xa24/0x1120 21:02:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f00000000c0)) [ 2478.744253][T26822] ? selinux_file_ioctl+0x8e0/0x970 [ 2478.749532][T26822] ? do_vfs_ioctl+0x7c2/0x1410 [ 2478.754423][T26822] ? __lookup_mnt+0xb4/0xf0 [ 2478.759037][T26822] ? tty_get_icount+0x70/0x70 [ 2478.763763][T26822] __se_sys_ioctl+0xcb/0x140 [ 2478.768359][T26822] __x64_sys_ioctl+0x3f/0x50 [ 2478.773006][T26822] do_syscall_64+0x3d/0x90 [ 2478.777475][T26822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2478.777501][T26822] RIP: 0033:0x4665d9 21:02:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b37, &(0x7f00000000c0)) 21:02:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3c, &(0x7f00000000c0)) [ 2478.777567][T26822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.777582][T26822] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:02:00 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4c, &(0x7f00000000c0)) [ 2478.777626][T26822] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2478.777637][T26822] RDX: 00000000200000c0 RSI: 0000000000004b44 RDI: 0000000000000003 [ 2478.777647][T26822] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.777656][T26822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2478.777666][T26822] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 [ 2478.899327][T26860] FAULT_INJECTION: forcing a failure. [ 2478.899327][T26860] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.899353][T26860] CPU: 1 PID: 26860 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2478.899418][T26860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.899429][T26860] Call Trace: [ 2478.899436][T26860] dump_stack_lvl+0xb7/0x103 [ 2478.899460][T26860] dump_stack+0x11/0x1a [ 2478.899477][T26860] should_fail+0x23c/0x250 [ 2478.899502][T26860] ? __anon_vma_prepare+0x92/0x2d0 [ 2478.899534][T26860] __should_failslab+0x81/0x90 [ 2478.899560][T26860] should_failslab+0x5/0x20 [ 2478.899577][T26860] kmem_cache_alloc+0x46/0x2e0 [ 2478.899658][T26860] ? __anon_vma_prepare+0x41/0x2d0 [ 2478.899679][T26860] __anon_vma_prepare+0x92/0x2d0 [ 2478.899699][T26860] do_anonymous_page+0x7bc/0x8a0 [ 2478.899716][T26860] handle_mm_fault+0x98f/0x1a50 [ 2478.899735][T26860] do_user_addr_fault+0x609/0xbe0 [ 2478.899754][T26860] exc_page_fault+0x91/0x220 [ 2478.899784][T26860] asm_exc_page_fault+0x1e/0x30 [ 2478.899807][T26860] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2478.899902][T26860] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2478.899922][T26860] RSP: 0018:ffffc900104d7b88 EFLAGS: 00010297 [ 2478.899939][T26860] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200000c0 [ 2478.899954][T26860] RDX: ffffc9000e9b6000 RSI: 000000000000003b RDI: 000000000000003c [ 2478.899968][T26860] RBP: ffffc900104d7df0 R08: ffffffff81af3134 R09: ffffffff81aea9d7 [ 2478.899988][T26860] R10: 0000000000000039 R11: ffff888104fbb040 R12: 0000000000004b44 [ 2478.900001][T26860] R13: ffff888104fbb040 R14: 00000000200000c0 R15: ffff888100329c00 [ 2478.900087][T26860] ? vt_ioctl+0xe7/0x2060 [ 2478.900117][T26860] ? vt_do_kdgkbmode+0x34/0x60 [ 2478.900135][T26860] vt_ioctl+0x605/0x2060 [ 2478.900188][T26860] ? terminate_walk+0x263/0x280 [ 2478.900213][T26860] ? path_openat+0x18e4/0x1f20 [ 2478.900236][T26860] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2478.900256][T26860] ? do_filp_open+0x18a/0x200 [ 2478.900276][T26860] ? fsnotify_perm+0x59/0x2e0 [ 2478.900340][T26860] ? __fsnotify_parent+0x32f/0x430 [ 2478.900359][T26860] ? tty_jobctrl_ioctl+0x100/0x900 [ 2478.900383][T26860] tty_ioctl+0xa24/0x1120 [ 2478.900400][T26860] ? selinux_file_ioctl+0x8e0/0x970 [ 2478.900421][T26860] ? do_vfs_ioctl+0x7c2/0x1410 [ 2478.900437][T26860] ? __lookup_mnt+0xb4/0xf0 [ 2478.900481][T26860] ? tty_get_icount+0x70/0x70 [ 2478.900495][T26860] __se_sys_ioctl+0xcb/0x140 [ 2478.900510][T26860] __x64_sys_ioctl+0x3f/0x50 [ 2478.900568][T26860] do_syscall_64+0x3d/0x90 [ 2478.900588][T26860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2478.900612][T26860] RIP: 0033:0x4665d9 [ 2478.900626][T26860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.900644][T26860] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2478.900686][T26860] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2478.900698][T26860] RDX: 00000000200000c0 RSI: 0000000000004b44 RDI: 0000000000000003 [ 2478.900710][T26860] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 21:02:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSBRK(r0, 0x5409, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000180)=""/216) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4, 0x1, 0x19, 0xc, "543d91b40b08b753312e6b064d7c0c66a44209de8bfc55945f704fc75a8d49a9c3bc1cf8787f3336fdddb522ec44559ba031b1d1a42427960b4092d38c6100c8", "8e2757d9fee8e833eb1bc6d145840e1d07dc2b1e9468965521f4bd3c91ea990a", [0x7, 0xf000000000000000]}) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x2, 0x1, 0x6}}, 0x14) r2 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/dev/vcs\x00', 0xfffffffffffffff8) keyctl$reject(0x13, 0x0, 0x6, 0x0, r2) 21:02:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3a, &(0x7f00000000c0)) 21:02:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4d, &(0x7f00000000c0)) 21:02:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f00000000c0)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x9, 0xc24, 0x9, 0xc3, 0x15, "ece2d757615635c7d2c89e2b02721be91bb0f9"}) 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3d, &(0x7f00000000c0)) 21:02:01 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) [ 2478.900721][T26860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2478.900734][T26860] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f00000000c0)) [ 2479.359192][T26881] FAULT_INJECTION: forcing a failure. [ 2479.359192][T26881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2479.372717][T26881] CPU: 0 PID: 26881 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2479.381140][T26881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2479.391206][T26881] Call Trace: [ 2479.394577][T26881] dump_stack_lvl+0xb7/0x103 [ 2479.399205][T26881] dump_stack+0x11/0x1a [ 2479.403374][T26881] should_fail+0x23c/0x250 21:02:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 21:02:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4e, &(0x7f00000000c0)) [ 2479.407799][T26881] __alloc_pages+0x102/0x320 [ 2479.412491][T26881] alloc_pages_vma+0x513/0x680 [ 2479.417318][T26881] ? __anon_vma_prepare+0x236/0x2d0 [ 2479.422529][T26881] do_anonymous_page+0x16e/0x8a0 [ 2479.427611][T26881] handle_mm_fault+0x98f/0x1a50 [ 2479.432514][T26881] do_user_addr_fault+0x609/0xbe0 [ 2479.437590][T26881] exc_page_fault+0x91/0x220 [ 2479.442203][T26881] asm_exc_page_fault+0x1e/0x30 [ 2479.447214][T26881] RIP: 0010:__put_user_nocheck_4+0x3/0x11 21:02:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3c, &(0x7f00000000c0)) 21:02:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3d, &(0x7f00000000c0)) [ 2479.452974][T26881] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2479.472623][T26881] RSP: 0018:ffffc9001052bb88 EFLAGS: 00010297 [ 2479.472645][T26881] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200000c0 21:02:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f00000000c0)) 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b41, &(0x7f00000000c0)) [ 2479.472658][T26881] RDX: ffffc9000e9b6000 RSI: 000000000000003b RDI: 000000000000003c [ 2479.472675][T26881] RBP: ffffc9001052bdf0 R08: ffffffff81af3134 R09: ffffffff81aea9d7 [ 2479.472688][T26881] R10: 0000000000000039 R11: ffff888100bb8080 R12: 0000000000004b44 [ 2479.472700][T26881] R13: ffff888100bb8080 R14: 00000000200000c0 R15: ffff888100329c00 [ 2479.472714][T26881] ? vt_ioctl+0xe7/0x2060 [ 2479.472784][T26881] ? vt_do_kdgkbmode+0x34/0x60 [ 2479.472805][T26881] vt_ioctl+0x605/0x2060 [ 2479.472828][T26881] ? terminate_walk+0x263/0x280 [ 2479.472854][T26881] ? path_openat+0x18e4/0x1f20 [ 2479.472876][T26881] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2479.472961][T26881] ? do_filp_open+0x18a/0x200 [ 2479.472985][T26881] ? fsnotify_perm+0x59/0x2e0 [ 2479.473007][T26881] ? __fsnotify_parent+0x32f/0x430 [ 2479.473049][T26881] ? tty_jobctrl_ioctl+0x100/0x900 [ 2479.473070][T26881] tty_ioctl+0xa24/0x1120 [ 2479.473087][T26881] ? selinux_file_ioctl+0x8e0/0x970 [ 2479.473107][T26881] ? do_vfs_ioctl+0x7c2/0x1410 [ 2479.473126][T26881] ? __lookup_mnt+0xb4/0xf0 [ 2479.473146][T26881] ? tty_get_icount+0x70/0x70 [ 2479.473221][T26881] __se_sys_ioctl+0xcb/0x140 [ 2479.473240][T26881] __x64_sys_ioctl+0x3f/0x50 [ 2479.473255][T26881] do_syscall_64+0x3d/0x90 [ 2479.473276][T26881] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2479.473297][T26881] RIP: 0033:0x4665d9 [ 2479.473310][T26881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2479.473329][T26881] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2479.473345][T26881] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 21:02:01 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 21:02:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f00000000c0)) 21:02:01 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b41, &(0x7f00000000c0)) 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) [ 2479.473357][T26881] RDX: 00000000200000c0 RSI: 0000000000004b44 RDI: 0000000000000003 [ 2479.473368][T26881] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2479.473379][T26881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2479.473390][T26881] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b45, &(0x7f00000000c0)) [ 2479.817551][T26925] FAULT_INJECTION: forcing a failure. [ 2479.817551][T26925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2479.830734][T26925] CPU: 1 PID: 26925 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2479.839185][T26925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2479.849364][T26925] Call Trace: [ 2479.849376][T26925] dump_stack_lvl+0xb7/0x103 21:02:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b62, &(0x7f00000000c0)) 21:02:01 executing program 4: socketpair(0x18, 0x80000, 0x6, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="a21c8b810950ee5ed9f09abad31202b34ac6308ff1248460e90da086c38717ed0ccc4fc3bbefcb67535d6f8b669d6d3780d6a1bc1162b85c9927c8c0a0e31085737b796a6bd7b837e547238b3883bd932f9894d18c13b7393727782ee2cf94a5b4ea6180775f60bc53590ecd70479225c994c5e7616f2839dc506b99dd950005559d38f95d40bd774adc6e6e3a424664a90241dc59aed88b73baff2139832a743fcdb6626e0b053d692a892b024cf4ee818c8a061a727cf947a1c9bbc84d8fb2a6e08aa4790c1bac7f7125f02d91029eb7c4cac7c88339c9") r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8c3, 0x4, 0xfe00, 0xff, 0x3}}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x101, 0x9}) [ 2479.849399][T26925] dump_stack+0x11/0x1a [ 2479.849416][T26925] should_fail+0x23c/0x250 [ 2479.849439][T26925] should_fail_usercopy+0x16/0x20 [ 2479.849548][T26925] _copy_to_user+0x1c/0x90 [ 2479.849567][T26925] simple_read_from_buffer+0xab/0x120 [ 2479.849584][T26925] proc_fail_nth_read+0xf6/0x140 21:02:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b46, &(0x7f00000000c0)) 21:02:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b63, &(0x7f00000000c0)) [ 2479.849608][T26925] ? rw_verify_area+0x136/0x250 [ 2479.849654][T26925] ? proc_fault_inject_write+0x200/0x200 [ 2479.849681][T26925] vfs_read+0x154/0x5d0 [ 2479.849700][T26925] ? selinux_file_ioctl+0x8e0/0x970 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)) 21:02:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x2, &(0x7f00000000c0)) [ 2479.849792][T26925] ? __fget_light+0x21b/0x260 [ 2479.849810][T26925] ? __cond_resched+0x11/0x40 [ 2479.849835][T26925] ksys_read+0xce/0x180 [ 2479.849890][T26925] __x64_sys_read+0x3e/0x50 21:02:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b64, &(0x7f00000000c0)) [ 2479.849906][T26925] do_syscall_64+0x3d/0x90 [ 2479.849926][T26925] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2479.849947][T26925] RIP: 0033:0x41935c [ 2479.849960][T26925] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2479.849974][T26925] RSP: 002b:00007f84c7eaa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2479.849992][T26925] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 2479.850003][T26925] RDX: 000000000000000f RSI: 00007f84c7eaa1e0 RDI: 0000000000000004 [ 2479.850016][T26925] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2479.850028][T26925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:02:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b48, &(0x7f00000000c0)) [ 2479.850121][T26925] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_dev$ttys(0xc, 0x2, 0x0) 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b65, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b2f, &(0x7f00000000c0)) 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f0000000000)="7485dda5207aece15a0c6b8487d02b9acb576e96aa7bcc439de3f22790fa375f1a5f5071c2e286c76f413d67253609efb565389244fa26c214758d353aecb53490fa2188fdacf4ac51ced0a0e76400bb997d7e07f3b5f8516a789bc8275eb050e22be8ec") syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b49, &(0x7f00000000c0)) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b45, &(0x7f00000000c0)) 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b66, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b30, &(0x7f00000000c0)) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4a, &(0x7f00000000c0)) 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x20000) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/243) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x9, 0x89, 0x4, 0x0, 0x10}}) 21:02:02 executing program 2: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x7f}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b46, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f00000000c0)) 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b48, &(0x7f00000000c0)) 21:02:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="ba430291611f15a91bb1cc5a56d4b827778149c7652f4322b1f53c290a94862c389a524fb8064267a8eff513c3ee54349da3fbf1d68c2361bbf2db6ce546d1ba7be55f1b10327e5250a09565a8e5545805ad3fef5f28fffe6271e9a1a5b8582c8503355b9fbf78567cee68f5e9993f791c3b215c02d7ae86c40ce696dc1df75944dcea83562b024fdbaa79c5e3befaf3d01db1cc7671619be1962bb4c4812276c553bd7c35aedaa919b3515ab64f7d35ca633c710c85675ecc5da8338cdacb62b5715db6809342895d0263fb257b66a415eaa1ee5d28cf4f66fac6a14c7bc638fdd91568") 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b67, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b32, &(0x7f00000000c0)) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b48, &(0x7f00000000c0)) 21:02:02 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4c, &(0x7f00000000c0)) 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b68, &(0x7f00000000c0)) 21:02:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x4, 0x9, 0x40, 0x0, 0xd}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b49, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4d, &(0x7f00000000c0)) [ 2480.507665][T27037] FAULT_INJECTION: forcing a failure. [ 2480.507665][T27037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2480.520833][T27037] CPU: 1 PID: 27037 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4a, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b34, &(0x7f00000000c0)) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4e, &(0x7f00000000c0)) 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) [ 2480.520857][T27037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2480.520869][T27037] Call Trace: [ 2480.520877][T27037] dump_stack_lvl+0xb7/0x103 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f00000000c0)) [ 2480.520899][T27037] dump_stack+0x11/0x1a [ 2480.520914][T27037] should_fail+0x23c/0x250 [ 2480.520998][T27037] should_fail_usercopy+0x16/0x20 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, 0xfffffffffffffffd) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f00000000c0)) [ 2480.521021][T27037] _copy_to_user+0x1c/0x90 [ 2480.521040][T27037] simple_read_from_buffer+0xab/0x120 [ 2480.521118][T27037] proc_fail_nth_read+0xf6/0x140 [ 2480.521141][T27037] ? rw_verify_area+0x136/0x250 [ 2480.521161][T27037] ? proc_fault_inject_write+0x200/0x200 [ 2480.521184][T27037] vfs_read+0x154/0x5d0 [ 2480.521202][T27037] ? selinux_file_ioctl+0x8e0/0x970 [ 2480.521223][T27037] ? 0xffffffff81000000 [ 2480.521241][T27037] ? __fget_light+0x21b/0x260 [ 2480.521256][T27037] ? __cond_resched+0x11/0x40 [ 2480.521278][T27037] ksys_read+0xce/0x180 [ 2480.521297][T27037] __x64_sys_read+0x3e/0x50 [ 2480.521316][T27037] do_syscall_64+0x3d/0x90 [ 2480.521334][T27037] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2480.521354][T27037] RIP: 0033:0x41935c [ 2480.521389][T27037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2480.521405][T27037] RSP: 002b:00007f3bf69a4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2480.521423][T27037] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 2480.521434][T27037] RDX: 000000000000000f RSI: 00007f3bf69a41e0 RDI: 0000000000000004 [ 2480.521445][T27037] RBP: 00007f3bf69a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.521458][T27037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)) 21:02:02 executing program 2: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x5e7, 0xffffffff, 0x9, 0x100, 0xc, "07d9f83ea3f99b97f663ae3ffa70bef8be0546"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2ca, 0xff8, 0x81}}) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4c, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b35, &(0x7f00000000c0)) 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, 0xfffffffffffffffd) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b62, &(0x7f00000000c0)) [ 2480.521470][T27037] R13: 00007ffcf892a42f R14: 00007f3bf69a4300 R15: 0000000000022000 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b63, &(0x7f00000000c0)) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b36, &(0x7f00000000c0)) 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, 0xfffffffffffffffd) 21:02:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0xc0}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4d, &(0x7f00000000c0)) 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b70, &(0x7f00000000c0)) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b64, &(0x7f00000000c0)) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4e, &(0x7f00000000c0)) 21:02:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b65, &(0x7f00000000c0)) 21:02:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, 0xfffffffffffffffd) 21:02:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x4a840, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x72}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x10) 21:02:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b37, &(0x7f00000000c0)) 21:02:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b71, &(0x7f00000000c0)) 21:02:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3a, &(0x7f00000000c0)) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b66, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, 0xfffffffffffffffd) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b72, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b62, &(0x7f00000000c0)) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x8}}) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b67, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b63, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, 0xfffffffffffffffd) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfa, &(0x7f00000000c0)) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8000, 0x1000}}) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b64, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, 0xfffffffffffffffd) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b68, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3c, &(0x7f00000000c0)) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfb, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b65, &(0x7f00000000c0)) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x244000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x4}}) ioctl$KDSETLED(r1, 0x4b32, 0x100) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, 0xfffffffffffffffd) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3d, &(0x7f00000000c0)) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5409, &(0x7f00000000c0)) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x4, 0x2, 0xfffffc01, 0x1, 0x3, "2c26b94d5afc64ee202d4700f016eb549d68bf"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x1000, 0x6, 0x0, 0x4}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x0) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, &(0x7f00000000c0)) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540b, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b66, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, 0xfffffffffffffffd) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x40000) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x5, 0x1, 0x1, 0x2, 0x10, "5a2c497de2fd5f606564f62730d277aaba6e87"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b70, &(0x7f00000000c0)) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540c, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b41, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b67, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, 0xfffffffffffffffd) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b71, &(0x7f00000000c0)) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_dev$tty20(0xc, 0x4, 0x1) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540d, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b45, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, 0xfffffffffffffffd) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b68, &(0x7f00000000c0)) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b72, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b46, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, 0xfffffffffffffffd) 21:02:03 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9c}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004081) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0xe0, 0x0, 0x6, 0x14, 0x2, "085d5ff9d4ec6decceef6bc890d7fdf97745dd030d8f6ead9912336a222b7892b24e962d8e6ae50eab2eaef6b61a5610d57f6fe3b00100909a8ce19004b63068", "47fc1f47ae39967d807396677a80febef1c609a00518b5ddad68168a9078673d91585588b244b7e207c02121303717e4d0e6ae0178c3e6265a1cfa64854b3963", "e166fc0c3c4b85a86ce88df10124022ddc682ed76991ecbe3312368da47b11a8", [0x7, 0x8]}) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540e, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x8, 0x10001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x40, 0x1, 0x7}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x6a3100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x9, 0x2, 0x0, @private2, @loopback, 0x1, 0x40, 0x4, 0x9}}) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) syz_open_pts(r3, 0x22780) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x6e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x110}, 0x20054084) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x5, 0x8b, 0x80000000, 0x1, 0x1, "b36e045c75992f6b86e784db649fb0bbde76a0"}) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfa, &(0x7f00000000c0)) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540f, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, 0xfffffffffffffffd) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b48, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xfffe, 0x1000}}) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfb, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b49, &(0x7f00000000c0)) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5410, &(0x7f00000000c0)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, 0xfffffffffffffffd) 21:02:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x44044) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000300)="28e9f9d45d369d4f4d418db7b91129298632e3b9ebfa4cd1f55c8098bd3177086a4b041cf60e05c5c8fd2b18990d8dc3361956acece7cd5fc0f3d5198a830e120c88515b5afa932c92c72959b055e1b587957dc4f2abfa826b46dc9869") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000", @ANYBLOB="e23babf8bcb357d81a7760bae50c96555751abf300fa67275601e1597eddded46ee914aee0f0c74174b11f0773e4a7293469429230ac16d0ba4be84a1db83e8540543723286e23151c003e2792f9e4b51422d5a07993eafb3f738ea58a402a29c711450b311c5a8a96191ffc2a5f0c36123c9003ffc60b4fa91826299b9fff54b4578e396a87d983ae1e6b30cd928ad7a4d15feb2fe2cb3d0797ce44d17f88ea719a76b39504c686b40703d025591991bd5a20278f8ca1b3a9dfa10c9f8ec1d5488019310cda5b2203e81989783f389847c38b9164901759481a024ea97b4bf2d1c7d9170e393193c9f185b19dde0617e6e26f6756007c", @ANYBLOB="000127bd7000fddbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00bcffffff080001007063690011000200303030303a30303a31302e300000000008000b0001000000080001007063690011000200303030303a30303a31302e300000000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x814) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5409, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4a, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b70, &(0x7f00000000c0)) 21:02:03 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) 21:02:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, 0xfffffffffffffffd) 21:02:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f00000000c0)) 21:02:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540b, &(0x7f00000000c0)) 21:02:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4b, &(0x7f00000000c0)) 21:02:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b71, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5413, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, 0xfffffffffffffffd) 21:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_pts(r0, 0x800) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/154) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4c, &(0x7f00000000c0)) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540c, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b72, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, 0xfffffffffffffffd) 21:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540d, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5414, &(0x7f00000000c0)) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4d, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfa, &(0x7f00000000c0)) 21:02:04 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x86001, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, 0xfffffffffffffffd) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5415, &(0x7f00000000c0)) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540e, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfb, &(0x7f00000000c0)) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b4e, &(0x7f00000000c0)) 21:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8001}, 0xb) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000000c0)=""/217) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540f, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, 0xfffffffffffffffd) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5416, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5409, &(0x7f00000000c0)) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5417, &(0x7f00000000c0)) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5410, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540b, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, 0xfffffffffffffffd) 21:02:04 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x28b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004041) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) socket$nl_generic(0x10, 0x3, 0x10) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b62, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540c, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5418, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, 0xfffffffffffffffd) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f00000000c0)) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b63, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540d, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541b, &(0x7f00000000c0)) 21:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0xff, 0x7, 0x4, 0x19, "871adbbcb007ecb0002cc48501dd9697321f0c"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x80100000001, 0x341802) ioctl$TCSBRK(r1, 0x5409, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="c7cb4a95f56fafcd4430e93a7e042ac03b756ae2cc5946aad34605db6f5af41d2ff0ab4aca0040d1b7396aad6a7f2940ddb1fe583e8b1f72f39a7b52c788bf819c1fc599e533dd2b8ac72bc46224a9847ac43b71d33858caf2a3b7fa861335474c9fb41c19b5a1852c8dec663a7d66228d6e") 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5413, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540e, &(0x7f00000000c0)) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b64, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541c, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, 0xfffffffffffffffd) 21:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xfff, 0x40, 0xa1a}}) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5414, &(0x7f00000000c0)) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b65, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540f, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541d, &(0x7f00000000c0)) 21:02:04 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="080028bd7000fcdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000339a15688d2cb9f6eaeabbbeadb8a603235e601e"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf2505000000050033000100000008003200ffff0000080032000100000056e1c10949dee39bae57fdb8914d1f90887b455df7aed53d91fb8bd0166cd8272aba9b3fb154112f578862ead9ddcb506be101040000000000001203cb992aba8d7616f74bd0c741d8c4101fc8e5cc348ebd2eef62abcfc7eadc7546c1d8b87a063c9881081e090000000000164ebfb8af6bc4da89ad90f7bd88bed7e5832ea691e7d1c5a79769f74af54438dc735839d4331425edef047492187a228a64570f5c3dbdc041a4ddca0634b0756136"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0xffff, 0x0, 0x0, 0x3}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x10, 0x17, 0x1c4, &(0x7f00000002c0)="29afdcc533e12e4b95433422664fa746771e0d6c6cf75b1924f4784f6385f3ae6feefea2e50686f5ca3f550304cac1687bcf1fed4c69c12dc2b09aec1621769cf018bbd8d0eac2ee2b585424497ec958d003be1153505a6990303d9464ab14e5777f1a4a65a1f4caf5d662cf7c63492c360814543e00044f14bea2a2c241d965e7a7208dfd09567d2370c2a9f3ecd466b28c1e0d62c488a4ce8c875f673d705d17915be806d9a80e7e73e3c47b406b566555308cc8ad2fc6d3fa915a06a5e00739e4a89adca73927ed4f2512b859f07048bca616ed3613ec304b81d1a1b1f691f408e7aaea367dc78ed4ee9976f135bb2bab2ccfe277c4509503a447c8bca77dc28b079b19e184c007b081188034aa5a6990d16934ac4eb4aa87928a13284a7d310cab475c96e883b633bd36a390bc85b38b0492d6e1411370cba2e146d10f979af2e26785d497d8bb68421b500bc217bc5660064f7b4b6b48f47c6c1f7751ceeec32f65e4089baf029f9418fa2a465755f6f9ecad61d57a4314fc6944f87708039bb15651439f4167da2caf0aaecd6a07e4bc5a48ff85afa583343f94b525a505b77612d426631bc77b22714bfea4e676e325d6bb5b06bf4c9b68e589b5d6ee5bf8b6fd8af572e1952753d991469de62ed914ffe0c1805f77d814b2677d450863899f088f2eccb9948053159217bf077a144476bc034541dd0f1f46ca4e52612b7cfe6f1ddcf179361dc3454c5f9b97082e76028a76cd9414632e6f5b86fc3dc0a2cc0924e2527ac4898dc82edd9493e23fd71c2c3df1e046c5e283a6fc96be2d08a940e5533fedeec4f0a88d3d816458e96c0ecf2c25a6d4a75b8a5f70f6ecc6991b93e87ec6e1ae7d17e2bcc6bec9ecfb2f9c5c4022bfa37aeef79deed9b5465498dff23456a0b9981700340660f2d72388fec0127061f101c742d0804bbd82c3bc8d440beeb008faa87ebd5d0ef6a9c3c8c9632e8ff44c040f871c60e41c65902e8a78af26fb95ae6be549d2e20cf6704df4fe8e4487a038c9151b6aac858e4e671109373fa4cf3a82079e3be4f795829601cc17d39a461be0ba520374d798d6fd4a4f6412c4b5c1d39b8736a4b7b65b09c71d4ca2c574c878caeb2d67d57cb0c852aac49dbae33976e7c94cf745f967b9b93f38cf83c5455a2e79246f889ccae9c252a90480b4355e5875dcb7c26959d88bb7aaa3d5f1930cb96434bb43ef5f8585f054ed2d5656c0dcbe09ca607c98034f403732716841082a0b0643f0d597438b3345c4d9f361b092875a738c404ae66ec13447c66b5c795ed2439efae5b98a0dd258eb2bca341d184d93970813e2ca0b088f7737a58466c7f60f2cfcb9d928add2fede9193e01d0ab263b839125f7ddceb4e2a690f9218b0dec0dae5a7a7c79e379dcfac61cce7d4c4e8d4b4694aa9b0118ee6e528047916bcc4e0ea"}) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, 0xfffffffffffffffd) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b66, &(0x7f00000000c0)) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5415, &(0x7f00000000c0)) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5410, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, 0xfffffffffffffffd) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b67, &(0x7f00000000c0)) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5416, &(0x7f00000000c0)) 21:02:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0x5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4101000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080426bd7000fcdbdf2508cf000008f73c00000000000a000900ffd5c3ffffff0000"], 0x28}}, 0x20000800) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000001140)=""/4109) 21:02:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f00000000c0)) 21:02:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, 0xfffffffffffffffd) 21:02:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b68, &(0x7f00000000c0)) 21:02:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5417, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, 0xfffffffffffffffd) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5413, &(0x7f00000000c0)) 21:02:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r1 = syz_open_pts(r0, 0xe00) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x10}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x5) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0xf721, 0x2}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000000c0)) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f00000000c0)) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5418, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, 0xfffffffffffffffd) 21:02:05 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5414, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541b, &(0x7f00000000c0)) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5422, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, 0xfffffffffffffffd) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b70, &(0x7f00000000c0)) 21:02:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_pts(r0, 0x10000) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/66) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5415, &(0x7f00000000c0)) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5423, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, 0xfffffffffffffffd) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541c, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b71, &(0x7f00000000c0)) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5416, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, 0xfffffffffffffffd) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5424, &(0x7f00000000c0)) 21:02:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x3) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r1, 0x5, 0xfffffffffffffff8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541d, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b72, &(0x7f00000000c0)) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5417, &(0x7f00000000c0)) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, 0xfffffffffffffffd) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5425, &(0x7f00000000c0)) 21:02:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1, 0x7, 0x401}}) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfa, &(0x7f00000000c0)) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5418, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, 0xfffffffffffffffd) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4bfb, &(0x7f00000000c0)) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5427, &(0x7f00000000c0)) 21:02:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xfff9, 0x1000, 0xfffe, 0x80}}) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541b, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, 0xfffffffffffffffd) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5409, &(0x7f00000000c0)) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5428, &(0x7f00000000c0)) 21:02:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x145}, 0x8000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0xf}}) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, 0xfffffffffffffffd) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541c, &(0x7f00000000c0)) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5422, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, 0xfffffffffffffffd) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5429, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540b, &(0x7f00000000c0)) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541d, &(0x7f00000000c0)) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5423, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, 0xfffffffffffffffd) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5437, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540c, &(0x7f00000000c0)) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x29, 0xff, 0x2, 0x9fc, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7, 0x0, 0xffff, 0xf94}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x4, 0x7f, 0x84, 0xfffffff8, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x7}}) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5424, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, 0xfffffffffffffffd) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5441, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540d, &(0x7f00000000c0)) 21:02:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5425, &(0x7f00000000c0)) 21:02:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, 0xfffffffffffffffd) 21:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5450, &(0x7f00000000c0)) 21:02:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540e, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x40, 0x4, 0x4}}, 0x14) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5427, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, 0xfffffffffffffffd) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5451, &(0x7f00000000c0)) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x540f, &(0x7f00000000c0)) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5422, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5428, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, 0xfffffffffffffffd) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5429, &(0x7f00000000c0)) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5423, &(0x7f00000000c0)) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5410, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, 0xfffffffffffffffd) 21:02:06 executing program 2: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x9000}, 0x40000) r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20020088) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40884}, 0x4000001) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0xeb, 0xfffffff7, 0x2, @loopback, @mcast1, 0x700, 0x20, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl0\x00', r4, 0x29, 0xf0, 0x2, 0x40c, 0x12, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0xe0f}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8, 0x1000, 0xfffc, 0x0, 0x4}}) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f00000000c0)) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5424, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, 0xfffffffffffffffd) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5437, &(0x7f00000000c0)) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x545d, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x29, 0xff, 0x2, 0x9fc, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7, 0x0, 0xffff, 0xf94}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x4, 0x7f, 0x84, 0xfffffff8, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x7}}) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5425, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5441, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, 0xfffffffffffffffd) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5413, &(0x7f00000000c0)) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5460, &(0x7f00000000c0)) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5427, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5450, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, 0xfffffffffffffffd) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5414, &(0x7f00000000c0)) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5428, &(0x7f00000000c0)) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5600, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x29, 0xff, 0x2, 0x9fc, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7, 0x0, 0xffff, 0xf94}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x4, 0x7f, 0x84, 0xfffffff8, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x7}}) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5451, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, 0xfffffffffffffffd) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5601, &(0x7f00000000c0)) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5429, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x29, 0xff, 0x2, 0x9fc, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7, 0x0, 0xffff, 0xf94}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x4, 0x7f, 0x84, 0xfffffff8, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x7}}) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5415, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x29, 0xff, 0x2, 0x9fc, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7, 0x0, 0xffff, 0xf94}}) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5416, &(0x7f00000000c0)) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5602, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, 0xfffffffffffffffd) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5437, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x545d, &(0x7f00000000c0)) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5603, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, 0xfffffffffffffffd) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5417, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5441, &(0x7f00000000c0)) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5605, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5460, &(0x7f00000000c0)) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5418, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, 0xfffffffffffffffd) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5450, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5600, &(0x7f00000000c0)) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541b, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 21:02:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5606, &(0x7f00000000c0)) 21:02:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, 0xfffffffffffffffd) 21:02:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5451, &(0x7f00000000c0)) 21:02:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541c, &(0x7f00000000c0)) 21:02:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5601, &(0x7f00000000c0)) 21:02:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) socket$inet6_udp(0xa, 0x2, 0x0) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, 0xfffffffffffffffd) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5607, &(0x7f00000000c0)) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541d, &(0x7f00000000c0)) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f00000000c0)) 21:02:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5602, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, 0xfffffffffffffffd) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5608, &(0x7f00000000c0)) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x545d, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, 0xfffffffffffffffd) 21:02:07 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5603, &(0x7f00000000c0)) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x541e, &(0x7f00000000c0)) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f00000000c0)) 21:02:07 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5460, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, 0xfffffffffffffffd) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f00000000c0)) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5605, &(0x7f00000000c0)) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560a, &(0x7f00000000c0)) 21:02:07 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5422, &(0x7f00000000c0)) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5600, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, 0xfffffffffffffffd) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560b, &(0x7f00000000c0)) 21:02:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5423, &(0x7f00000000c0)) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5606, &(0x7f00000000c0)) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5601, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, 0xfffffffffffffffd) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5602, &(0x7f00000000c0)) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560c, &(0x7f00000000c0)) 21:02:07 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5424, &(0x7f00000000c0)) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5607, &(0x7f00000000c0)) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5603, &(0x7f00000000c0)) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5425, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffd) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560d, &(0x7f00000000c0)) 21:02:07 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5608, &(0x7f00000000c0)) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5605, &(0x7f00000000c0)) 21:02:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560e, &(0x7f00000000c0)) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5427, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, 0xfffffffffffffffd) 21:02:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5428, &(0x7f00000000c0)) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5606, &(0x7f00000000c0)) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f00000000c0)) 21:02:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, 0xfffffffffffffffd) 21:02:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560a, &(0x7f00000000c0)) 21:02:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:02:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5607, &(0x7f00000000c0)) 21:02:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5429, &(0x7f00000000c0)) 21:02:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560f, &(0x7f00000000c0)) 21:02:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, 0xfffffffffffffffd) 21:02:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560b, &(0x7f00000000c0)) 21:02:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5437, &(0x7f00000000c0)) 21:02:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:02:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5608, &(0x7f00000000c0)) 21:02:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, 0xfffffffffffffffd) 21:02:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5441, &(0x7f00000000c0)) 21:02:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:02:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40049409, &(0x7f00000000c0)) 21:02:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, 0xfffffffffffffffd) 21:02:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f00000000c0)) 21:02:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560c, &(0x7f00000000c0)) 21:02:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5450, &(0x7f00000000c0)) 21:02:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:02:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560a, &(0x7f00000000c0)) 21:02:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, 0xfffffffffffffffd) 21:02:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560d, &(0x7f00000000c0)) 21:02:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f00000000c0)) 21:02:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5451, &(0x7f00000000c0)) 21:02:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:02:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, 0xfffffffffffffffd) 21:02:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f00000000c0)) 21:02:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560e, &(0x7f00000000c0)) 21:02:08 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40087602, &(0x7f00000000c0)) 21:02:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560b, &(0x7f00000000c0)) 21:02:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, 0xfffffffffffffffd) 21:02:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x545d, &(0x7f00000000c0)) 21:02:08 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)) 21:02:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, 0xfffffffffffffffd) 21:02:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560c, &(0x7f00000000c0)) 21:02:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5460, &(0x7f00000000c0)) 21:02:08 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4020940d, &(0x7f00000000c0)) 21:02:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560f, &(0x7f00000000c0)) 21:02:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560d, &(0x7f00000000c0)) 21:02:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5600, &(0x7f00000000c0)) 21:02:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, 0xfffffffffffffffd) 21:02:09 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, 0xfffffffffffffffd) 21:02:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045432, &(0x7f00000000c0)) 21:02:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40049409, &(0x7f00000000c0)) 21:02:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, 0xfffffffffffffffd) 21:02:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560e, &(0x7f00000000c0)) 21:02:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5601, &(0x7f00000000c0)) 21:02:09 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045440, &(0x7f00000000c0)) 21:02:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f00000000c0)) 21:02:09 executing program 2: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5602, &(0x7f00000000c0)) 21:02:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, 0xfffffffffffffffd) 21:02:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80086601, &(0x7f00000000c0)) 21:02:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40087602, &(0x7f00000000c0)) 21:02:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5603, &(0x7f00000000c0)) 21:02:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560f, &(0x7f00000000c0)) 21:02:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, 0xfffffffffffffffd) 21:02:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5605, &(0x7f00000000c0)) 21:02:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80087601, &(0x7f00000000c0)) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4020940d, &(0x7f00000000c0)) 21:02:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, 0xfffffffffffffffd) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045432, &(0x7f00000000c0)) 21:02:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5606, &(0x7f00000000c0)) 21:02:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, 0xfffffffffffffffd) 21:02:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x801c581f, &(0x7f00000000c0)) 21:02:10 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40049409, &(0x7f00000000c0)) 21:02:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5607, &(0x7f00000000c0)) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045440, &(0x7f00000000c0)) 21:02:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, 0xfffffffffffffffd) 21:02:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5608, &(0x7f00000000c0)) 21:02:10 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f00000000c0)) 21:02:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, 0xfffffffffffffffd) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80086601, &(0x7f00000000c0)) 21:02:10 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40087602, &(0x7f00000000c0)) 21:02:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x5609, &(0x7f00000000c0)) 21:02:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80087601, &(0x7f00000000c0)) 21:02:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, 0xfffffffffffffffd) 21:02:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:02:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)) 21:02:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560a, &(0x7f00000000c0)) 21:02:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0189436, &(0x7f00000000c0)) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x801c581f, &(0x7f00000000c0)) 21:02:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:02:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, 0xfffffffffffffffd) 21:02:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4020940d, &(0x7f00000000c0)) 21:02:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560b, &(0x7f00000000c0)) 21:02:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc020660b, &(0x7f00000000c0)) 21:02:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:02:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045432, &(0x7f00000000c0)) 21:02:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560c, &(0x7f00000000c0)) 21:02:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000440)) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x8000015, 0x22, 0xd7, &(0x7f0000000000)="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"}) r4 = syz_open_dev$vcsn(&(0x7f0000000480), 0x5a30310d, 0x109000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000001) 21:02:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, 0xfffffffffffffffd) 21:02:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:02:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560d, &(0x7f00000000c0)) 21:02:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045440, &(0x7f00000000c0)) 21:02:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0189436, &(0x7f00000000c0)) 21:02:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, 0xfffffffffffffffd) 21:02:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc020660b, &(0x7f00000000c0)) 21:02:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:02:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560e, &(0x7f00000000c0)) 21:02:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x80) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f0000000040)="08552dc8f16e91de6efd6a42ff9bed678fea6a0a8a645919c79b52cfdb8f14f17c21a3b06e6e03d7c50f3ebd7441e7779fb3066bd8fee3c6862972b296ac") ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 21:02:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80086601, &(0x7f00000000c0)) 21:02:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, 0xfffffffffffffffd) 21:02:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:02:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x8000) syz_open_pts(r1, 0x20001) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x100) ioctl$PIO_UNISCRNMAP(r2, 0x4b33, &(0x7f00000000c0)="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") ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:02:11 executing program 1: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b3b, &(0x7f00000000c0)) 21:02:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80087601, &(0x7f00000000c0)) 21:02:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, 0xfffffffffffffffd) 21:02:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x801c581f, &(0x7f00000000c0)) 21:02:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x560f, &(0x7f00000000c0)) 21:02:12 executing program 1: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000000)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, 0xfffffffffffffffd) 21:02:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:12 executing program 5: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b33, &(0x7f00000000c0)) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, 0xfffffffffffffffd) 21:02:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd29, 0x3ff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b3b, &(0x7f00000000c0)) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40049409, &(0x7f00000000c0)) 21:02:12 executing program 5: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/227) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x10800) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, 0xfffffffffffffffd) 21:02:12 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f00000000c0)) 21:02:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x4100) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:02:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0189436, &(0x7f00000000c0)) 21:02:12 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x40087602, &(0x7f00000000c0)) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, 0xfffffffffffffffd) 21:02:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000300)=0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2460008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044890}, 0x20024804) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r5, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xffff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x20}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x7}, {0x5}}]}, 0xcc}}, 0xc000) ioctl$TIOCCBRK(r1, 0x5428) 21:02:12 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc020660b, &(0x7f00000000c0)) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)) 21:02:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x5669, 0x2, 0x8, 0x9, 0x6, "e12360d87cdfddcbcbcaf3417bde0cc53ee911"}) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, 0xfffffffffffffffd) 21:02:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x4, 0x40, 0x4, 0xf}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4020940d, &(0x7f00000000c0)) 21:02:12 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, 0xfffffffffffffffd) 21:02:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x2, 0xfffff948, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x700, 0x80, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r1, 0x4, 0x2, 0xac, 0x375, 0x29, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x5, 0x1}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b3b, &(0x7f00000000c0)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x4, 0x4) 21:02:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x5110c0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x3, 0x100, 0x3, 0x7ff, 0x19, "13e2801134d83a28270207ffb5ca7bfa48f977"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045432, &(0x7f00000000c0)) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, 0xfffffffffffffffd) 21:02:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x4, 0x80000001}) 21:02:12 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)="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") ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x1, 0x3, 0x15, 0x1c2, &(0x7f0000000180)="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"}) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80045440, &(0x7f00000000c0)) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, 0xfffffffffffffffd) 21:02:12 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x81, 0x200000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x137}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20004044) 21:02:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 21:02:12 executing program 1: syz_open_dev$sg(&(0x7f0000000080), 0x8, 0x10100) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/120) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, 0xfffffffffffffffd) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80086601, &(0x7f00000000c0)) 21:02:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000000c0)) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, 0xfffffffffffffffd) 21:02:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)) 21:02:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x9, 0x8, 0x401, 0x5, 0x10}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x80087601, &(0x7f00000000c0)) 21:02:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x1, 0xda, 0x40, 0xfffffff9, 0x14, "8549c26b7b606a37dbc656013b629a5c12ce6d"}) 21:02:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, 0xfffffffffffffffd) 21:02:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x4, 0x9, 0x40, 0x0, 0xd}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_pts(r1, 0x40200) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)="9dd4811317a540aa061881e141c7a2ce3dad01ad20c8eabdaa12bcfcf83564a0dd0887bbca901830c69170566e350342f5bffc8df7306b74b73bfd8ed6f228cc0c94cd67bbd26a912942ab52329d") 21:02:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/156) 21:02:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x3, 0x2, 0x9, 0x3, 0x14, "5ede1254f6060003008d9b8f2afa1268a78500"}) r2 = syz_open_pts(r0, 0x448781) ioctl$TIOCCBRK(r2, 0x5428) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x801c581f, &(0x7f00000000c0)) 21:02:13 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, 0xfffffffffffffffd) [ 2491.751562][T28618] FAULT_INJECTION: forcing a failure. [ 2491.751562][T28618] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.764199][T28618] CPU: 1 PID: 28618 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 2491.772621][T28618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.782686][T28618] Call Trace: [ 2491.782697][T28618] dump_stack_lvl+0xb7/0x103 [ 2491.790578][T28618] dump_stack+0x11/0x1a [ 2491.794746][T28618] should_fail+0x23c/0x250 [ 2491.799171][T28618] ? 0xffffffff81000000 [ 2491.803487][T28618] __should_failslab+0x81/0x90 [ 2491.808296][T28618] ? vt_do_diacrit+0x14d/0x6e0 [ 2491.813056][T28618] should_failslab+0x5/0x20 [ 2491.817593][T28618] kmem_cache_alloc_trace+0x49/0x310 [ 2491.822912][T28618] ? 0xffffffff81000000 [ 2491.827059][T28618] ? 0xffffffff81000000 [ 2491.831220][T28618] vt_do_diacrit+0x14d/0x6e0 [ 2491.835814][T28618] ? 0xffffffff81000000 [ 2491.840035][T28618] vt_ioctl+0x7de/0x2060 [ 2491.844352][T28618] ? 0xffffffff81000000 21:02:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, 0xfffffffffffffffd) 21:02:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000080)="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") 21:02:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x4001) ioctl$KDSETLED(r1, 0x4b32, 0xb51) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000000)="f8ea01af7919925f664449cbcec75191477e6b522e1f377d2d843b7eed4bdad29eae4a72368863ffa2505c76a17bd67ce604eacb94263d6b513a6c3ca9ceb208ba84f08e7df1fe9377eab7557da8ebfb8d06dca93809c95b4b01521c756927ad9bbeb94dbfb0222b98cec03e7b7ea40f9870fd996e723ca7c207c277ae4c798a8eed0a2c986d340b599e75e68169a07c56cdd64b5023a6d0331a5ea1f24768a7e6921337b83b291c4015997ddfc3ea164c3c8bf994001b53bd5b8381") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x288, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x1e0, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e67f96cbe96eea23eb2e1218f1c0a6e33027aa0d12cc00eaab2cd057db736216"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @remote, 0xfffffffa}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x288}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$KDSETLED(r2, 0x4b32, 0x5) 21:02:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 21:02:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, 0xfffffffffffffffd) [ 2491.848499][T28618] ? terminate_walk+0x263/0x280 [ 2491.853517][T28618] ? path_openat+0x18e4/0x1f20 [ 2491.858287][T28618] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2491.863831][T28618] ? do_filp_open+0x18a/0x200 [ 2491.868509][T28618] ? fsnotify_perm+0x59/0x2e0 [ 2491.873240][T28618] ? __fsnotify_parent+0x32f/0x430 [ 2491.878360][T28618] ? 0xffffffff81000000 [ 2491.882516][T28618] ? tty_jobctrl_ioctl+0x100/0x900 21:02:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/100) 21:02:13 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) [ 2491.882545][T28618] ? 0xffffffff81000000 [ 2491.882557][T28618] tty_ioctl+0xa24/0x1120 [ 2491.882573][T28618] ? selinux_file_ioctl+0x8e0/0x970 21:02:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000000c0)) 21:02:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, 0xfffffffffffffffd) 21:02:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETLED(r0, 0x4b32, 0x2000000001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x8000) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x1, 0x3, 0x6}}, 0x14) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f00000000c0)) [ 2491.882593][T28618] ? 0xffffffff81000000 21:02:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000040)="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") r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x80000, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa0, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x12, 0x9, 0xe0, &(0x7f0000000180)="9f40ff3c675d3cefa77e517be826e3cf540e7e6af3c102dffdae741c8963049852d0d08afce8d2e3ef482d4eaae983844e38300470d23599f7938dc5afcd056378e8aa904fac4031b3826e699a71b9b2fa147f86156226070e0b89457c25b91a581a774cb84e7e4b8f3ca9e383a51e0ebc391cc271396e5ddfb91f8e3004ee07efa265ac81364c2172d2dfe818596f9601169defdf571dbaf1eb08974abe9717f178575a6e94aa0ce1d2dd1c5d51092f1e9cf9543de5a35b885245a3da4404f321557575322880b172f5c2cedb05d613d4d419515f0829004edaedba1897cb79262b3d5cb4252e10492037e1451e5d8ace298537de12380ae8c1591ab7d926ff60dc4ca1493ac26693ea1c7e3ab6fe6ef2d7e50dee1c4d3e39ca13847dbde39758a808bca93d1e11851b3617c5d864a3e32419bb9b111d794bce4c24420517d4df041b7a8ead28389d21ea239906389cd1e926489b81da5b02412d5a865d4c8926b328b758ec14ceec99eb2b56cfbec1e013c9ce47720cc5300b544ed358512ff231a3fd94e50f330f9ba19b2dec9d0a6be4f6e715d71b2030b6dae0450dd76d6c8d46753a0e701709e1e6ffdac89dae8a751488ea6d88423bbd9deef832a8644ce6097a7a0ad8e628eb3ec5a7297500c15786fa012804cb7df62b1c7924294a7f3b40ab8f63e99a9ce79c0ab3d9008f5c9df29992c550aadde1a4396659149dc3a8c820278c1fa8104d9a68e934363173c2a75913c7875088573c88f9ea26a7bbeb9768c3eaed9daf2c28f9906a64143c1e8d271e7b88d2ee8a05805b037ffb2daf87eaa9a6908e9059cbec5b83da354702edb3dc27872d89478cd0fdf7bed8ddd1268da6d87182da54bc15816a2ca098a51d1c795bcb127d60b6748e5a671092b09ec5b71955fb0e5e5afe3757dc9f68223513d0c97f07c79d615069324f16f3167546935609cea29e1f7452ffbfd182eb145cd761157e229326622493e2f6c901c1ccd768b9177ee4a120941640649d68a97ab3e967b8a0477a6fca963164a2270308304d49769d5cde4476e8ba2a601c2a2003ac1edb86a47ee7c84af1f107b3f7612e3dd1327dbafd018a70893239bcfd0605cbe7a8fa55f175acee275887e938da829379f9454b25178dd0fdfa7cd43cf770edea3b779ce741905be38a3f797b424c4d8cd2f2266b4b9fb98e4d24b2e665fde2b0784fea7382c581823a1193a436ed9f8e1b18a5c6c686fc65b0afc3df14a9f316aa4cedd839d365018549a061c759986c512db4777b4cf3fe4a34ac6c3ad6d493a0ca5a839c044e2bbca3849dc4c1f9021c28b2c0fa57a1cf21001a5e10c76db10c0fd0f9a5d19e89e585aaa36d48ec3001180ebe7c32e255c20a92d0083ee32eea23d3327479e546339540663d60c31d775341e3a75c67a19c49990e18df4c6d7a2c783d23514d5626"}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000005c0)=""/164) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x5, 0x7fffffff, 0x7, 0x4, "4aff6850420cb939f0be8bbed87e60a260ccb9"}) [ 2491.882646][T28618] ? do_vfs_ioctl+0x7c2/0x1410 [ 2491.882697][T28618] ? __lookup_mnt+0xba/0xf0 [ 2491.882714][T28618] ? 0xffffffff81000000 [ 2491.882780][T28618] ? 0xffffffff81000000 [ 2491.882790][T28618] ? tty_get_icount+0x70/0x70 [ 2491.882867][T28618] __se_sys_ioctl+0xcb/0x140 [ 2491.882883][T28618] __x64_sys_ioctl+0x3f/0x50 [ 2491.882898][T28618] do_syscall_64+0x3d/0x90 [ 2491.882915][T28618] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2491.882937][T28618] RIP: 0033:0x4665d9 [ 2491.882949][T28618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2491.882966][T28618] RSP: 002b:00007f569863b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2491.882985][T28618] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2491.883016][T28618] RDX: ffffffff81000000 RSI: 0000000000004b4a RDI: 0000000000000003 [ 2491.883084][T28618] RBP: 00007f569863b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2491.883096][T28618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2491.883115][T28618] R13: 00007ffcb9318c6f R14: 00007f569863b300 R15: 0000000000022000 [ 2491.883127][T28618] ? 0xffffffff81000000 [ 2491.982480][T28650] FAULT_INJECTION: forcing a failure. [ 2491.982480][T28650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2491.982562][T28650] CPU: 1 PID: 28650 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 2491.982582][T28650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.982593][T28650] Call Trace: [ 2491.982600][T28650] dump_stack_lvl+0xb7/0x103 [ 2491.982623][T28650] dump_stack+0x11/0x1a [ 2491.982753][T28650] should_fail+0x23c/0x250 [ 2491.982777][T28650] should_fail_usercopy+0x16/0x20 [ 2491.982808][T28650] _copy_to_user+0x1c/0x90 [ 2491.982825][T28650] simple_read_from_buffer+0xab/0x120 [ 2491.982843][T28650] proc_fail_nth_read+0xf6/0x140 [ 2491.982865][T28650] ? rw_verify_area+0x136/0x250 [ 2491.982969][T28650] ? proc_fault_inject_write+0x200/0x200 [ 2491.982994][T28650] vfs_read+0x154/0x5d0 [ 2491.983013][T28650] ? selinux_file_ioctl+0x8e0/0x970 [ 2491.983035][T28650] ? 0xffffffff81000000 [ 2491.983047][T28650] ? __fget_light+0x21b/0x260 [ 2491.983063][T28650] ? __cond_resched+0x11/0x40 [ 2491.983220][T28650] ksys_read+0xce/0x180 [ 2491.983240][T28650] __x64_sys_read+0x3e/0x50 [ 2491.983260][T28650] do_syscall_64+0x3d/0x90 [ 2491.983279][T28650] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2491.983302][T28650] RIP: 0033:0x41935c [ 2491.983316][T28650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2491.983333][T28650] RSP: 002b:00007f569863b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2491.983352][T28650] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 2491.983382][T28650] RDX: 000000000000000f RSI: 00007f569863b1e0 RDI: 0000000000000004 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x29, 0x2, {0x2, [{{0x1, 0x1}, 0x800, 0x80, 0x7, './file0'}]}}, 0x2a) 21:02:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc0189436, &(0x7f00000000c0)) 21:02:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x214001) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x13, 0x13, 0x137, &(0x7f0000000000)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 2491.983395][T28650] RBP: 00007f569863b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2491.983408][T28650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2491.983421][T28650] R13: 00007ffcb9318c6f R14: 00007f569863b300 R15: 0000000000022000 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, 0xfffffffffffffffd) 21:02:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_pts(r1, 0x2280) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, 0xfffffffffffffffd) 21:02:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1ff) syz_open_pts(r1, 0x4e0302) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b3b, &(0x7f0000000000)="cc693e2a81b1c9516307826bb816aeae88a5f0885f3686b207fa0f2ee760adebf15514ab5d39a92b8e192b2272594af73e8d697fc6d93db954dae3dd067ec5b6bdfec0774839c93d0a2bdadebbb5b93d22acb089c879d16ecbcf6a2756319932c319a3562736f6d96b91b8332bc07580ffb19ad6faac8d4f061b2dbf9b395979b2aa") r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3ff, 0xa0200) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x5, 0x400, 0x1f, 0x3, 0x3}}) 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, 0xfffffffffffffffd) 21:02:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0xc020660b, &(0x7f00000000c0)) 21:02:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000100)={0x6, 0x2}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x5}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x9, 0x9, 0x3, 0x3ff}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000000)="c48e01fdd23d545b6272357a07261bb3a004990878d05a39da608f8901b974f2f7e4232016de31cac9871417f7cb4b80dbbaa1442d9655cf") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 21:02:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0xb718, 0x3, 0x2, 0xb, "118bb2f26edbf640bf4ca088f648147ce754b9"}) 21:02:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x80) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, 0xfffffffffffffffd) 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, 0xfffffffffffffffd) 21:02:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:02:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x4280) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000080)=0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000000c0)) 21:02:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x1, 0x8, 0xfffffffd, 0x2, 0x1, "f2f7e7c00425b3516302d2e580a70f66eccce9"}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xe1541f136adf2e02, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f0000000080)="9673b82dbb44d5a41e70d729e7c0b0f165c84138ca0e453df983b949aa96de400617969e6ed9d7e76c49851305b4356e1203ed876af999516c9e9dd30bb44423db1ff64bc6b57a6b86530a6547f05b63ddb11237ccb2159ece256c05dcbc012d71516551a1e618141755f7d9c5a63253f6874aa7df7246e0e273b4d00bcf3844a6c109198960003135cf60283fcd3699") 21:02:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="33b00861c1c1586a995e9de994755bb5c835741aac334e9d8e0fc756fa82c285ba4dae1dcf4626a356d4ec1dd77b5900242b00c6e114132a8f01464b6e481c1ff820a349d9aba78440a996c4f16c88cac290aad74d7a25f40a0d166c3a503275") 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, 0xfffffffffffffffd) 21:02:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000040)="dc6836ca9624759c8c68e0c88061eea60436ff9c10d17ffc9db894b70992395f5faa8d3c1f65eecde5be097ea7976c14692e7dd48e7bd4bfdc4d86000000d4593b26") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x608602, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x6, 0x16, 0x154, &(0x7f0000000180)="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"}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x6, 0x7ff}) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, 0xfffffffffffffffd) 21:02:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0xff, 0x0, 0x27ac, 0xf}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x3, 0x1, 0xa2a, 0x9, 0x15, "91d201a7895f986910a83f9a9dd6a57f83bed3"}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x4000) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xba5, 0x59, 0x3ff, 0x4, 0x3}}) 21:02:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000000c0)=""/175) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000300)="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") 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, 0xfffffffffffffffd) 21:02:14 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x20008004) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b3b, &(0x7f00000000c0)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$TIOCCBRK(r5, 0x5428) ioctl$TIOCCBRK(r4, 0x5428) socket$inet_udp(0x2, 0x2, 0x0) 21:02:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x29e918bbb4c4bed5) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, 0xfffffffffffffffd) 21:02:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4, 0x2, 0x7, 0x7f, 0xb, "2c69f349e0da277d55ab37703b89f653e337b3"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) 21:02:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = timerfd_create(0x4, 0x800) timerfd_gettime(r1, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, 0xfffffffffffffffd) 21:02:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f0000000080)="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") 21:02:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, 0xfffffffffffffffd) 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, 0xfffffffffffffffd) 21:02:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) syz_open_pts(r0, 0x103400) 21:02:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff7ffffffc) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, 0xfffffffffffffffd) 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, 0xfffffffffffffffd) 21:02:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x240000) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x1ff, 0x4, 0x4, 0x80, 0x4}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="aa1b179364c042ac2c2546c8e88e87474943ef6385d390f73a48b10f0eb74c98a4810385b65876569be28455d95835c4bc828cd46024c088bbcabc786cca4128806f62f3889735605fd270f1bf525c9d7813064e60bca623a76ec190f6f03d5f307f317bb2ff77c9ba264be03c714963dfb15b272e5d5787fa5937cd43b955018e82857ab81bdd0b46a466ff8d11f8e5870036db34ff15646dfa08a2e685b522715eb8a3f4b15e2ead21bc25ac732102bc4bdf8b407ad3d9288e37d8880c34a11412829c66c7b92790b9033ca7a7375f851f5b3eb573e87ba115fb77149280906d440c23667d7f1fc94e0648659a6dda110b4855032d6419be89") ioctl$TCSETSW(r2, 0x5403, &(0x7f00000003c0)={0x2, 0x0, 0x1ff, 0x0, 0x2, "b2410b55ba3d77125c12a7e81e60e26daecf10"}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x0, 0xc00) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x40) r5 = syz_open_pts(r0, 0x500) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x1, 0x5, 0xbdff, 0x3f, 0x4}}) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000240)) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="a8fc3be1f6dcc5e629e9da5c9b8750c11f1eda576cfe48e21745f4cfdfb1742d4dc9bdbf5d97660da4ec58d8e3deb7a2c940b4484217a00f0713fda201fa0d44bc6b9316c74a6d16e78a84f12c2b3b2a31060e0b1ab4bfbb891d8c9ae43f8329c53aa18a58cf96520e2b9b316567cdacbf08901cbeaa1202236a6787e63218e241d4cc62a1a89786dbcce9da1c9921057be525c4e0051b77b8d90f8f5254617dc62c80b5a2a3b311") 21:02:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x100, 0x1, 0x7, 0xffc0, 0xf, "0dd0c03d726f7278efca9196daf7027bc97306"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x6, 0x2, 0xdad3, 0x6, 0x3, "0d957ffcab2d023c58943ddb34c4db5c1e656a"}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x2, 0x3}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000300)={0x10000, 0x3}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0xe1, 0x81, 0xfff, 0x73, @mcast1, @mcast1, 0x40, 0x8000, 0xffffffff}}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9aa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc8d}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x11}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b44, &(0x7f0000000000)="b65e1dd82ad3349e448d1d5d4c01a763ad5b9c015b791daf4c97b92c29d8f73e708e5bf248168c40ef36c14bdc975736d1c41d44ef84652d68188b854c8cd06f3be390b1fe0bce95bd45efc6c0051e0c23bb85d1fa2cddbeb3098cf0a7b3d634bd9d4d8e46f4641e016e1c226fd4bab712744857f2e5cd1ff352eda4cf60c90bb45cb56c238863888121fe1b7d47736992862ef5cdbae645e4bf5fb260c1a24935a9acf71e2dafc0568932549e92518720b44e2a9f68faa4da3b1edc15a124297dccbb0000") 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, 0xfffffffffffffffd) 21:02:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x80) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000000c0)) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f0000000000)="7107000000032592de25bc97136c1d1406d23fada73c66d1cf13e0f80eb43085bccfb1a4f8ddc6f81d76b0c1e36400d71e16c664000000000000e8000000007a2e5993f0cc0a5206c5766b02fd7cb6801d429b42080038fb9a3d4bbfb5b20592") 21:02:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x3d, 0x1, 0x100, 0x6000, 0x1, "67895e3d9ec722ec2585d0565860f3949dda83"}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfff, 0x3, 0x9, 0xfffffff8, 0x6, "6e9c2d0fc93615b649b00cecbad547a88f9785"}) 21:02:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000200)=0x4) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000e00)=""/4096) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$KDSETLED(r1, 0x4b32, 0x7) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x22180, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x80000007, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000240)="d86e1975a8b54e8c17f13034bf67273c3596b9f57e8fc0e339d240e9b2af2e4d0934d82742e55a32c5360a508aa07749d683fb0e839087fff629d8e7d6f00119226c7b6d1cace6645cb8f4d20b0e207bfff02238f3253d5718db97fb6c1eef428261c97889f644803317fca3d66e9d32154305682256812769c28e9b5c8da9984facf63a3fad74a0be") ioctl$TIOCCBRK(r5, 0x5428) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3) 21:02:14 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x501801, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000180)="61070000006ffe02bed4181b842dd191a9fbed166790569108cffef98e4f330accd8469eca732b57c37494aa1c62968314cbbc7a3e3e40b39c91179a60852043fd360f4fb212c19dd45655b1e3db2fc8e98dd1d763fc7bd6cd66bbcf4a5cc94a224639f617864a32ceea5cb498a82a1e87574d6117ddb89f0ab6ff452a2aaec3dee4c8e669a717ce9e1874a98818f042c3ada650af17ac78861b6cfb0ba9dd145842740a24f487a670fee023079c5ae4cd00c30c199dd6de3aadcdaa27e66286db82141f47967693a8b93fa8fa006bd0bb838d9c19c891c255a84dd69ca899e9129bbb9306b07508e212514983d444c7d63bad8fb27a") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x5600, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, "ca3bbc9c447071c7426c0e2a18f561922d4250"}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, 0xfffffffffffffffd) 21:02:14 executing program 3: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000140)="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") 21:02:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000040)) 21:02:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x3, 0x2, 0xf9b, 0x3, 0x1a, "511d677fef7d993190ac879e9389e6a30758dd"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$KDSETLED(r0, 0x4b32, 0x100000000) 21:02:14 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xeed, 0x2000) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x9eb5b7225d583fe5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_open_pts(r1, 0x80200) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000a80)={0x2, 0x0, 0x0, 0x17, 0x50, &(0x7f0000000680)="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"}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x204, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) 21:02:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, 0xfffffffffffffffd) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7ff, 0x2, 0x8b, 0x7fff, 0x4}}) 21:02:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x3afd, 0x7, 0x7, 0x86a, 0xd, "72be0f66d6defd2b1f98cf07f56432b402ad3d"}) syz_open_dev$tty1(0xc, 0x4, 0x3) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x8851) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCCBRK(r3, 0x5428) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0xf}, 0x1, 0x0, 0x0, 0x24000881}, 0x20000007) 21:02:15 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000200)="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") 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = msgget$private(0x0, 0x100) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/203) r2 = msgget$private(0x0, 0x184) msgrcv(r2, 0x0, 0x0, 0x0, 0x4800) getsockname$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x3a) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000040)="bd7c08f88b49d535574af709f86109374f2b14289a9f05920f1ee710b1b2a8b9bb2218010001009a28cc5ae17c94db203ef0cdddd0a127d4ca87b8e796c8a4f4a720bf6d111a849e3fb9c0abaa4f8f86e88d37265c0f5f5d886ef61266f87cd8d07490e84ff98275db29cfc45da8a8cc4d3ede79dd20fd2a746f1c5ccfca852bc8229c41c56c14cbccdb9be099756dd556b8c6d73d") 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xe0, 0x7f, 0x0, 0x51, @empty, @empty, 0x10, 0x80, 0x1ff, 0xffff348e}}) timerfd_gettime(r1, &(0x7f0000000000)) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, 0xfffffffffffffffd) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000200)="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") 21:02:15 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f00000000c0)) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/203) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, 0xfffffffffffffffd) 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0xfff) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f0000000000)="b1ff570720e01f7cd2a50f2861cb7a2de3fcfac69b302fc4af36ecdba329d3593632ca981f627eed9d3e965f4e45c64b191d1d19447c15af7e228320151a4cb619f2b18177163a40114e1150c98abf7d8353dde6b0476d96c09a9d9f6993a4e32a609a409659d220ebef14275d58bd94b60b6bd10a01a55e16f2c55b9575554662f58f19125a74caadcfdf075f1b238501a0734c55f8f46641c1c967182e8d773391ff4b124016981d30e0657e7b3697e6a1247fee9f1a9a63e27fe6d23e437646facfac34ae85cd0e1211c2f89463a7dd428ac1eb57bfa2c971e1dc47898bfea28f79a4d53b0e0d4b46e1b831e547a46a284c487d85b05799c247b63b2917742aee8143e2649406bcd89b7d9012ee48dd8179de3049d431ea51e222f30811131ee5431408273ed69048a09001970af6057be286325a6304485cfd") 21:02:15 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x82) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x400c0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000180)={0x1f, 0x0, 0x268, 0x1, 0x1b, "47ba67de9f0e5f8fdd0d0ff0d606f03e9614d6"}) ioctl$PIO_UNISCRNMAP(r2, 0x4b31, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:15 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400a01, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5ae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x24044000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) 21:02:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="61592bd42ab81fd40a61a6e16839ede1c1a12ee3a6c21fea1375edf69feeb2e7364ef6529c10393feedd4a27b8e040a6215546416ba6d135ee1d8dbccec2ea027ea3ea54f948e2cec414eff7357352114b6a5d4c02d790abe40ef6f1c4b208fcdf630b6e6033230e36ae79b29baea80946c1f9962fb1ffc3185ee529f524f0da4988c8f9c1") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x1, 0x1ff, 0x7, 0x2}}) 21:02:15 executing program 0: socketpair(0x2b, 0x80000, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', r1, 0x29, 0x5, 0x4, 0x1, 0x34, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x8000, 0xffff, 0x49}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b31, &(0x7f0000000000)="2c582272d50501098e6511ad1165d036d741214fcd309b745ae07ef98b8a8a6d48664ea08ee4a687799bb91554a6a027a2836a0a16d463a6836fbdec725080a0763d027fabe8dd2d096186d3e7cc418073072dc10a70cbf96d8d1b2daa3fdfeb") 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, 0xfffffffffffffffd) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x1e}) 21:02:15 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0xb, 0x20, 0x1ed, &(0x7f0000000000)="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"}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000540)=""/192) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) write$P9_RRENAMEAT(r1, &(0x7f0000000440)={0x7, 0x4b, 0x1}, 0x7) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, 0xfffffffffffffffd) 21:02:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x181002) r2 = syz_open_pts(r0, 0x30b080) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000180)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) syz_open_pts(r3, 0x301) syz_open_pts(r1, 0x408000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x90400, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f00000001c0)) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) 21:02:15 executing program 5: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x404c050}, 0x4048051) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, 0xfffffffffffffffd) 21:02:15 executing program 4: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x400) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000080)={0x3c, ""/60}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) 21:02:15 executing program 1: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x1, 0x3, 0x2}}, 0x14) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)=ANY=[@ANYRES64=r2]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b3b, &(0x7f00000000c0)) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x2, 0x0, 0xa6, 0x80000000, 0xc, "79bd228533a95f5b68044e46550c2cb73a061d"}) 21:02:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, 0xfffffffffffffffd) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x6, 0x8000, 0x7ff, 0x8a, 0x3}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x400000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0x69, ""/105}) socketpair(0xa, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x6, 0xff, 0x3a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x1, 0x7, 0x5cc, 0x1000}}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, 0xfffffffffffffffd) 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r0, 0x5428) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x484000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x3, 0x4) 21:02:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7c0, 0xbf, 0x4, 0xa, 0xf}}) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0xc9}, 0xb) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xeb, 0x3, 0x5, 0x3}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, 0xfffffffffffffffd) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:15 executing program 1: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TCSETSF(r0, 0x4b32, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, "ca3bbc9c447071c7426c0e2a18f561922d4250"}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x2, 0xffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/104, 0x68, 0x6, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x840) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, 0xfffffffffffffffd) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x9555) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, 0xfffffffffffffffd) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0xa, 0x1d, 0x1a7, &(0x7f0000000000)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:15 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r3, 0x2f, 0xa9, 0x0, 0x0, 0x8, @private0, @local, 0x80, 0x20, 0x3, 0x9e}}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x108, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x721}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0x7fff}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000000) ioctl$PIO_UNISCRNMAP(r4, 0x4b44, &(0x7f0000000100)="df9bf91a1fd55c09b6aed2b25d60aa2b027b52532d59da65ced4290de48400afdec667096926129548f6c2845283e0dbc5e5dbc2258a01534434e0f7999209731e7c747655597899b86e65d97493f58f1211fbdad73a158eaca8fdc279b0a32966476f5575e9af28e1a9c40c21784919bddb764ad92d46e21d7a493c5ff45b2171f71c9b69e7c92f9207d009b710b1befeadfc979a49d262920bfca4e7a14d3b067167f5bc87c835d4022e3b2e2d988ae6d1873e29e2eb834e4625c7618697e1578774fa3fa78f84f43fbc0fbacc2664d3") r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r5, 0x4c01) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000f6", @ANYRES16=r6, @ANYBLOB="00012dbd7000ffdbdf25060000000a000900ae1f16302dae0000050035008100000008003900030000000800320010000000"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x243, 0x80081) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x101, 0x1) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd0, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x9, 0x1f, 0x10, "0dafe932acf1468cf54297b9bcfa849267eefc26d4b75cb361880e5e77d17a0b41fee0e420ce090339af4e787e9d12fc1540581c9f6d3503fd3884221ffc43a7", "270e456af3c93315da4f3e5bc39368741b1065d4c63563821053d37af81da887f6315a6b8794bd5239e799991e94cf9e7f56f1b3b6a90649252e5a53bf57caf8", "8a2292142b49b3171aa4f4baf33312793477993028a22704a4939ed0ef5ac335", [0xffffffffffffff3c, 0xfffffffffffffffd]}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x24000805) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x400, 0x16, "128075ac1e9055dacb078dc94bdd869e74927b"}) ioctl$KDSETLED(r0, 0x4b32, 0x52dc) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000000)=""/173) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="1a6166db44685c88e2d5da76eaf4aaad51c1d21c85046bbdc2b56c62a62d82273d5a84315b378b31b1cb7b442bb488139cfcc26ffd1d349abe847f4641b15ede9580e8fb9318d968b1b615fe55aaa0") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x7, 0x200, 0x8, 0xee0, 0x18, "6d6739a5a3ad2da0e00053781fa00f7db1a3bd"}) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x3, 0x0, 0x4e22}, 0x6e) 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, 0xfffffffffffffffd) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8c100, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x3fd, 0x69d8, 0x9, 0x401, 0x12}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000000c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x6, 0xd, 0xfffffffd, 0x6, 0x0, "a10e7404efdb1576477e00"}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x2) 21:02:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x100) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40003, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0xd0600) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000000c0)) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) ioctl$KDSETLED(r0, 0x4b32, 0x4) 21:02:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="460f971a8353cccc10be4f9e52118574ea78ecfd15431c4e52a1c3d26ea2db87f5a7700af1f94770cbd53c2d92dd737719288b527a954cdd39acfbd054b9985bc7c6dfca880efd4a581a4890877bb93b8dcdc5d0abbd11f926bbdd0f50a2257e0196e9094433bc099b226e00a70e6f01017923a8152ace5b6702911ebf361fa112fb43772c319b09504e3fab3468f415c27ee6b888a02871c7e066feb327d8eb751846e7a6983589a1a1") 21:02:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf250b00000005002e0001000000050035000c00000005002900000000000a000900bbbbbbbbbbbb00000800310020000000050029000100000008000300", @ANYRES32=r3, @ANYBLOB="080031000000000008003ae9a95500090000040101000000000000aa38b289ba31b2f70600000075eca415c7da9a7f353ffe6051c7b773073f70a9f566e5a4135d98801ee296ee0bb210cadfd1d5fadcb5d2a92a5115f643b1360a1c4e5756cfba905ea357fbbba02b339bbc4ec94f55e21b720007b0"], 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c041) 21:02:16 executing program 4: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x67dbd15f9d6a45b4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x79ff686e}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4000890) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000180)) ioctl$KDSETLED(r1, 0x4b32, 0x7) 21:02:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x62e081) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCCBRK(r1, 0x5428) 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)="9dfdef3c33a22128") 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, 0xfffffffffffffffd) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x40, 0x6, 0x81, 0xffff, 0xb}}) 21:02:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x1) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000080)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendto$unix(r1, &(0x7f00000000c0)="25e676f6b306d65f5a038097b6bcc76e00dfc778d6a3927783b4336b2034c9c320c58bd557be35bf9236547603cfb5f570682e0f004f8cceea141b7ba45c06a889dbac570982c5e70d935490b6253d0d03fc3c431bbc71c0e3fc93f83c0e2bfe", 0x60, 0x80, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 21:02:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02894b62", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250d00000008000b000900000008003b000008000008000600", @ANYRES32=r3, @ANYBLOB='\b\x009\x00\a\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x820}, 0x81) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:16 executing program 3: r0 = timerfd_create(0x6, 0x80800) timerfd_gettime(r0, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x800, 0x8001}) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f00000000c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x288000) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, 0xfffffffffffffffd) 21:02:16 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xe3, 0x9, 0x0, 0x9, 0x4}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 21:02:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) syz_open_pts(0xffffffffffffffff, 0x80) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x20082) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040)) 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, 0xfffffffffffffffd) 21:02:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) 21:02:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x6, 0xfff, 0x5, 0x3, "de7748a2fc5a33f192cb49ae492f383ba5040a"}) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="6da53329f274e829e471f3fa766a0e32939c039041123693893300ff7829a4e04e9788ebbc6e54e4b385976612037177674fa703982fffc2280d7498aa32f403e4fa891b7aaf3fff6cde0e1d0e3af4034063f7ad8a2f3a3f28668799bc02e7af02b59cbf10476f2f406a9a4167fb58cfa6740e1e96463b45974fb3477f336076f9d4ba4a1c0fce63ff9710d13e30c2f086f66c9c0f019d148441a711a235058bc521d0478f971542ddf003426fe2ea78cbb77b0cccb5e0d5aa3b92af7d177f02e77a08e30a8f2737cd1f7efeb0afc3d60ed23884bc948871f3") 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="a3288aa47237aeb7e813232141c801830e") ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x81}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x5, 0x7fff}, 0xf) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x4, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000100)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x9, 0x3550, 0x4, 0x2, 0xb}}) 21:02:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x157d, 0x8}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, 0xfffffffffffffffd) 21:02:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xf382, 0x5, 0xa5b, 0xea5a, 0x4}}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f00000000c0)) 21:02:16 executing program 4: socketpair(0xf, 0xa, 0x1ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4005}, 0x4000040) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x4, 0x191, 0x2, 0x5, 0x16, "84374b595e9577e1dbcf04e48d6883233bb3ad"}) ioctl$TIOCL_SETSEL(r2, 0x4b48, 0xfffffffffffffffd) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000100)=0x100ffd) 21:02:16 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0xf7, 0xf, 0xc, 0x1, "f59add6fa1e8feab14f2f494fc8acfbe415f10abb698a4ca6a0a5d7ed5e1ff7107191efe73a460f63e0039f53269f61bd1494bc819c3f6b03d341291dcabca4e", "2eb77b86adafa3062978867e392d33b457a9f9220bdaaafd824ce6758ad7f280", [0x5, 0x6]}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x22, 0xb2941) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000200)) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r4, 0x5409, 0x4) ioctl$PIO_UNISCRNMAP(r4, 0x4b31, &(0x7f00000000c0)) 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x11, 0x0, 0x3a, &(0x7f0000000000)="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"}) 21:02:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x5, 0x9, 0x10000, 0x3, 0x17, "708fc648eb143dcc95004e027d2190632fac9d"}) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80000) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000140)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000840)={0x0, 0xfffffffffffffffc, 0x55, 0x0, @scatter={0x6, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/237, 0xed}, {&(0x7f0000000540)=""/153, 0x99}]}, &(0x7f0000000680)="d448196f13aab6ed247ab90615109f090b88e653d51796c7ec9d3dca22a5546f1ca4b344d2adfa0b38578aa81aa714968c28aa98a8094699c3e1d7e6dd2cf18b7b1b8af9df85016c0ec4f8acb62a842f593165b121", &(0x7f0000000700)=""/193, 0x9, 0x3, 0x2, &(0x7f0000000800)}) mq_timedreceive(r1, &(0x7f0000000000)=""/138, 0x8a, 0xffffffff, &(0x7f00000001c0)={0x77359400}) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$KDSETLED(r4, 0x4b32, 0xfffffffffffffffa) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, 0xfffffffffffffffd) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:16 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b44, &(0x7f00000000c0)) 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x400000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f0000000000)="25967f45fc47db0464a12fa5d38b8e688bca5dcbc7c5cdf087f6da49a816546403c7e0df3d359d4859faea8e19b754743dfbd79d1bd457c5051dca50b4fa446c9a8883e12c85674aef26194c0677289a38bfdb3d9bfd9fc782763ac7bec79bddb0b9bb6ca97f908ac8bc8d8611f9e4cb9e41328a299885e4d2b014835abb2bcb25ebb8a36a8e04bf7e72ce016b4dcc3a33a9dfa82f0bc83595f88a539f6376207fc5e7a876075b6723b3f14ef5c387a11cc7c595dcf535dd90e63cecf93fea5e52f3bd9d99216c43e77219cd8b9f") 21:02:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x3, 0x7f, 0x0, 0xa92d, 0x12, "29b07f0d91404690e4430bb8f6aae754ee241c"}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000040)={0x5, 0x8001, 0x1, 0x0, 0x5}) ioctl$PIO_UNISCRNMAP(r3, 0x4b3b, &(0x7f00000000c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) r6 = syz_open_pts(r1, 0x30642) ioctl$KDSETLED(r6, 0x4b32, 0x7) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, 0xfffffffffffffffd) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe62, 0x9e, 0x0, 0x5, 0x15, 0x18, "c9193cbeffe8a433e4aa0e61b8846c7f32a431b35a5ac3659219b62abc511688384cab5113807a0b36f89addf56a8bf1af9f71dc2edb9a1e0ecb91e889d9a794", "23ae00638f2884878beb19005d94706e49b7bbffd6fdad90371edb7f860476fda78b8ad675e40b43a46753e6a05b1a0534f33e737bd3bce7ab822aa8aec7ae09", "478181e567c8cacaf1b4d584e33008027f172f29b6322163c56e5ee7407c8902", [0xffff, 0x2]}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x4, 0x2, 0x3ff, 0x100, 0x1, "3290f442d209324e8a26363b4096f1138abd6e"}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x401, 0x9, 0x401, 0x200, 0x15, "6e7e9772dac19348c094c2b5f103bc3124e923"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x4d, 0x0, 0x8, 0x28, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x310f5367566699a1, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r3, 0x4, 0x7, 0x0, 0x8000, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, @rand_addr=' \x01\x00', 0x8000, 0x2e726baf4ee63d6b, 0x7, 0x3ff}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xfff, 0x1, 0x9, 0x7ff, 0x1}}) 21:02:16 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, 0xfffffffffffffffd) 21:02:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 21:02:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/138) 21:02:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0x100, 0x20}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x8, 0x1c6, &(0x7f00000001c0)="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"}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x4, 0x2, 0xe, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7840, 0x1, 0xff, 0x7270}}) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x1, 0x8, 0x0, 0x401, 0x12, "da16acc9f3d25bd1be4f74446d4812929d9964"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa2221090}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="50020000", @ANYRES16=0x0, @ANYBLOB="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"/586], 0x250}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b31, &(0x7f0000000000)="62b7fd7ff244784abbf8bf4b3e8ffdc76577ef0bcc19405f77ff00e6cc16a52f5a549ee16ebc22b2cee69942087d18ed89bd9f37e1441a67f50dcd9e7a2a89a75522a483cee63bd8decc96f9b374d834bd610a8a74e0725e5088415c5f") 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_pts(r1, 0x200) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, 0xfffffffffffffffd) 21:02:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000040)="afe52ff397a22f78") syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x40) 21:02:16 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x2f, 0x76, 0x7a, 0x7c3d, 0x8, @empty, @local, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x2f, 0x4, 0x8, 0xd02, 0x21, @remote, @empty, 0x700, 0x8000, 0x6, 0x7}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) waitid$P_PIDFD(0x3, r0, &(0x7f00000001c0), 0x1000000, &(0x7f0000000240)) 21:02:16 executing program 5: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x1f}, 0xf) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000040)) ioctl$TCSBRK(r0, 0x5409, 0x3) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1e, 0x11, 0x43, &(0x7f0000000000)="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"}) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, 0xfffffffffffffffd) 21:02:16 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x21, 0x3, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x3) 21:02:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x23) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x7, 0x9, 0x10001, 0x2, "bf019c25b42076e9fafe8003126cba3b5b533e"}) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f0000000080)="a1363adfedc2cf57c093c4b8d1189c33f88eead61106ec688901e311f7fdc03bedcf1881e10cd7276519db36aa460c37253d3255cdd54fb6bf5aa3211b7a1c84ad341d98225747bafbfe6700"/88) 21:02:16 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xd0440, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, 0xfffffffffffffffd) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x2000c081) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_pts(r0, 0x101200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r2, 0x4b31, &(0x7f00000000c0)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r6, 0x5428) 21:02:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x80, 0x20, 0x7, 0x0, 0x12, "a852ab42fae294cfe379e4ca729b2b669a42d2"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/112) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 21:02:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x11, 0x2, &(0x7f0000000000)="a73d362053842bc41d489eefd1767d94f657f3147878843224c0440d67315314e1f55bf4abbfedc1d4ffdb635487492a41dd2436a033af89e04f8b10faad7a02167114ced24dd931c4abb647b7f1d0a8c139f9131fa6033807bf978e6ae5535bea7a2261b616bfb51bc88727b5b0610b23c60a54cb5581f2471bc71b325a94ee110e6ed0cac21fa1a80d0709aaeceab5e20408272215b4bc3c9ffa4b9fdf7b88ee8d656cd5a4183d0562a21821e22d7f83b6b0e57a529a61b67bcb665ed5a88fa14f8588342978de6484ecda9e8d3a62fd24ab15f24ce03b1d9f6edf91db8c3f72a26dabcf80c6fc13f0ad297202e09c4cce021c4102d48fcfa52fd7592a34a16be1b759bd75702dbf7661a080efe474578e53d1ac5cac38f7a3c38c702b687ec4c1ca1af07e4209df62aac61014a84055af637ca2f9ca6035ba122b4f223b5c2a55cbbc587e38b966d2d8dfe1c64b7dcb44d7a3402be509a424e027e3c0376f49e173d800e2755af89b84505f838287547865f873bc03283fcf1ff206973b7d7a3e16daa8a61383d55902c5dc6e48640793ef7aa86c7d96ca377d78d65e399830e913ae4e872e90f2e7e50782c51daddebc62b42295febb5e20dcbf9dcf174ae7005d7ee8ff2263e270aef14dfbf6f689aa1e09ff5eea7b759892a2b5045f93e66aaeedc2c60f2a681f467d5793ecebd3c4b301266f3a0c3ef42a251b325d1fcd6fac8cda94c5325538b85a846f631630973c4fac60ae537f666e7940b4b29ec5974e546ed111ccafe09dc20d743ed539001c1d58f9f84d0c4a7aaa6e7de747ba78461a4f78cf491222205e430d4b6d3072ffe3dba6961a1be5b4e161a961f2bb01642b286cf003524214b19e60552dc63df6eb5185149a1b3da8ec81b398637daf6d11b8607ed8281a32747950c17d5b9f75b60e5730f3d2616afd7256705fd51b62c1c7819d4142817e3469a706fbd129fd325551bf35508a7550edd6210728001d18cbe24a1984e548916ffedb3b10f15529d46af2697ea98ce14be1e90804f87be9cb1e0093897da13d8e9fb94298ef92d00276834cca636ae65cd31cda78383089a53fac406ee10d4c0848b1e1d57e5427df75f67bad209f17302cff0465b6207179243f13d76c410d077a16afc271ad40a04e0d2f6b1ebf2e9e9ab4b077a6abeb9e1ff60c3dba73ecad4e193415bd95881d23089eee42fa7a8877afb74ee7cbbd594bd456907d8634d0461db9810ed31088d5a4e7a615cf85dd06de1aee9057e669948ef3fdc503b90029f3ed13e12c0f0a82c1b3933b468197b5adecd3265ccd35461196c6ab404bc4bdd33ca3acbfa3edad8a426623a861f5a01650dd4402fd14cbacb8d0d5dad4d46f5d75808df991d5ce0a8ae9a3d74e29ab7c557927cbfdd0e8edc8c3816e684f9345f09cf473235548b5cbca06f5789cc737ea"}) r1 = syz_open_pts(r0, 0x8000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000480)={0xff}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000440)={0xb53, 0x1, 0xfffff865, 0x0, 0x12, "12272289af84bf1fd064a0b5ab6a0ef611660e"}) 21:02:16 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000000)="3ae314a724525812b0c47b6c334ba7afd11f7de5a5a10e3953bfb9b4bd54acb11641cba78475d5428a82cb1c98a6d23d4c76ec01414f6f4d8d605bb805359d4358af20ac0272") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x90040, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 21:02:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, 0xfffffffffffffffd) 21:02:16 executing program 3: msgget$private(0x0, 0x280) syz_open_dev$tty1(0xc, 0x4, 0x2) msgget(0x1, 0xf0b1457aaccae76e) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x80}) 21:02:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/185) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x22, 0x3f, 0x1, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7, 0x20, 0x400, 0x800}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, 0xfffffffffffffffd) 21:02:17 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:17 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x3d1102, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x29, 0x76, 0x0, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x7}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="651c2f3fd340"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004011) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x28080, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x1f) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x4b48, 0xfffffffffffffffd) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) 21:02:17 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) socketpair(0x2a, 0x0, 0x80000001, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x1) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x4024094) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)="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"/330) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, 0xfffffffffffffffd) 21:02:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x80000, 0x8000, 0x2, 0x6, 0x1b, "cd1faf42e290b35dcb057ce1f872e7861c8e29"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f0000000000)="5eaeeca04498c00bd2a818b456add7925137628df4f8df28d88e8c789de5d92833f871c090017610ca2f94a8caa79c43b6f9a4b892bafcd0502d574851ac1a5372dc215d22") 21:02:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r2, 0x29, 0x4, 0x0, 0x401, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x40, 0x80, 0x4ac, 0x7}}) 21:02:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, 0xfffffffffffffffd) 21:02:17 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1d3c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000054}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) 21:02:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x5, 0x36}) 21:02:17 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)="76bf25213d386fbcc610d01043f15df0ed1a4cd61a835c0a4bfd38adf9d64b7a4dc0a2e1bd3a2b7cd9cdb07ee2fe5c63e17ef0a4dbcf1bc05738931422e5") 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, 0xfffffffffffffffd) 21:02:17 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x26, 0x80000000, 0x3f, 0x5, 0x9, "64b8382517e6f06ce70caf4f9db847a113555d"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="8e4f896e62f067e353df") syz_open_pts(r0, 0x40100) 21:02:17 executing program 0: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000001c0)={0x9, 0xff, 0x0, 0xff, 0x2, "147586ffecfadfd695a94ef95e338422bf858d"}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ad0100005b2cf95df0d7c03016b5f42147d111a60fc6c6d8f0aa425138dd3a2c44e51dfd02dd2ddb10dbaabdd0a3006b31d388fb382521a32715b948e29c2018074dd19ef77c7b549d89f01a408ba694c86ada353e2bd967564c732aca4e21d13b90ffd72c5685014151d7b70ced44aa77058a683edd53c669a1bc5285a7c69fcdaf0b8f61443b40f64045cb4793cfb11200c2cc5438ebba85abddd4117103bf621e7823fb716ce8e2b9d938fc27e3d02a39208448c73bbb90a464a1b02e4a0c756474bba174bafde8d99c1d49fd5895f33c88df", @ANYRES16=0x0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCBRK(r2, 0x5428) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x615af453}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20044040) 21:02:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x81, 0x2, 0x4a1b3882, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @mcast1, 0x10, 0x7, 0x7f, 0x1f}}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:17 executing program 1: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x2, 0xe, 0x9, &(0x7f0000000000)="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"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, 0xfffffffffffffffd) 21:02:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000000)={0x10000, 0x3, 0x8, 0x6, 0x0, "79bce5469417bd219de82d157ed3c7e3e9c382"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 21:02:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0xa0d00) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b44, &(0x7f0000000340)="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") r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2010}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2805}, 0xc0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x5bc, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x4bc, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa4, @private2, 0xf8fb}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9765}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x2c0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x400, @local, 0xfff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b11539bf5d7d28d7f525ebd04a8bf2caa2a3f77e71abffa04e5630dd4f505c75"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @mcast1, 0xffffffcb}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x684, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d89e8cdf0f4a930a7c11fcf0e50808009a53f8670003181acfb523b70a6219f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x35, @private2, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9c43a303a35ea95e479d855b3803ce799c5b82dfc9f99074231a5cd75e058c6c"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @loopback, 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00', 0x8}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c5693e251e276f2ea4f793f1b572d25d0174bf48f178d197ce7c934a61f2f4a"}]}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000040)) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) 21:02:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x4e2240) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) write$P9_RREADDIR(r0, &(0x7f0000000180)={0x141, 0x29, 0x1, {0x7fffffff, [{{0x40, 0x1, 0x5}, 0x40, 0x7, 0x7, './file0'}, {{0x80, 0x1, 0x8}, 0x200, 0x0, 0x7, './file0'}, {{0x80, 0x1, 0x6}, 0x0, 0x81, 0x7, './file0'}, {{0x2, 0x2, 0x3}, 0x7, 0x81, 0x7, './file0'}, {{0x19dfc29eb5cd8585, 0x3, 0x7}, 0x7, 0x20, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0xfffffffffffffffc, 0xff, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x2, 0x7, 0x7, './file0'}, {{0x10, 0x1, 0x7}, 0x2, 0x9, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0xfffffffffffffff8, 0x4, 0x7, './file0'}, {{0x1, 0x4, 0x2}, 0x4, 0x3f, 0x7, './file0'}]}}, 0x141) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fd00080032000900000008003b00c90300000800330001807c00000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b3b, &(0x7f00000000c0)) socketpair(0x9, 0x6, 0x6, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) 21:02:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/105) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffff, 0x585840) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x40, 0xfffeffff, 0x70, @remote, @mcast2, 0x8000, 0x8, 0x6, 0x2a}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', r4, 0x2f, 0x1f, 0x9, 0x5b2, 0x24, @mcast2, @remote, 0x10, 0x80, 0x7f, 0x6}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r5, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r5, 0x2f, 0xc4, 0xfd, 0x401, 0x20, @private2, @mcast2, 0x8000, 0x7, 0x7, 0x9}}) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, 0xfffffffffffffffd) 21:02:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, 0xfffffffffffffffd) 21:02:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="393ab2a906ece515cc2cf6100743a4fda97754489388e64fcd4bcb8b6c8ec498f26bb11a1b7cd6753ef5f56abc43da5b4011c4ede38b75dadc5c0c83011d1e87c378419f8314975a75a76f8b665fb8a5e6050f4b1535be419d30b01c8e65111410e60c3dfc8e1e414110baab2b3f686b1d377d23070cfda7cace5d0e0c2e1c50f823bdd40e38e52eecd665b33be33b2c8521c3") 21:02:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0xb1, 0x4, 0x30000000, 0x5, 0x8, "c0c4d860a34daef30f866f8ea2f3184c4c56df"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, 0xfffffffffffffffd) 21:02:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 21:02:17 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf80b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x140) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x1, 0x2, 0x5}}, 0x14) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000000)=""/241) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f00000000c0)) 21:02:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x82, 0xc2002) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000100)=""/153) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x90000) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, 0xfffffffffffffffd) 21:02:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1000) 21:02:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004130}, 0x40000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x6, 0x7}) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x1}) 21:02:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x280200) [ 2495.771097][T29495] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2495.795860][T29504] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 21:02:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)="e4065f9bfca144dea0d75770d90890274c0cfe8fb260e847dd036a3545fda80a978877b912d772ff897dec6f86089e3098360e01973387d5b4a336e25b24bd23f616fea75a46a42a41bf9369492cbee9f646526604791a4e82e8534290f15793469d0ec02e79dac0df4a708f8c0f596347417b0ddfb10168bc05b3028b844d153d426cc793c742e29e723fde919d3908f06c700c919228d3f6436847c1902ab950fa6ae1ff4e4cc4052bb107104030ff1157e4afd53040898169637d8dc84ea2") r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000180)="eecc03243850dc17e7fc40046d09bbf232b45465f380ab5dd9bd35cc2008536f457a0f55fb392f40d6d81d10c00b935be43f3eda8ecf") ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/131) 21:02:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, 0xfffffffffffffffd) 21:02:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x4, 0x2, 0x0, 0x2}) 21:02:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_pts(r1, 0x4000) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8201, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/224) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0xffffffff, 0x5, 0x3f, 0xfffffff7, 0x14, "6d1ac709082b9d8ca72f13588bd7d992e73893"}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="a186788594cb80c8b6d3e2e3248430ffec6f12d3deb0401d3c84cbeb1f8b572c4cc15a07e8d1aae9e9c349a4af33f4420a43b13c8a6794c95a5903fcf3ce8989f57f0c38a9dc5983ba43b44be5113e7ae3dfbe816d633cd77eb4d014d8558afc61ef7a8fb1d9ea8c523c9e7d4c1bfe1bf567d68bcb0e9fd42c293ede72c8e9d4ec694adbf4c6a383028e50aa106ebf584d2949308e61df753cada2a2e01cab38ee1d2179f419d0935ddb831283b0baa65db0f2a101e9282ce1f66dbdcd4e111ca6cd0c7353ef4bb2c18316631b8e05dd7c1e649da2f3b72a59e831366d8e57eefc66f94021dd9fbe78cbcf5babe1084e3d2b81ebadcec6") 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, 0xfffffffffffffffd) 21:02:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) 21:02:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:17 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0xffff, 0x7, 0x83, 0x2}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="de1c55af3060334e96cfc0f0ea8ee63cf52a4a0061328d438fb59515dd7b5b30e8a2620c5d46336a7d61332547961d0bfd3f3df35c5cfae2637a3fecbe63f33c530649b68591573b") 21:02:17 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)) 21:02:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, 0xfffffffffffffffd) 21:02:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3f, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xbd, 0x7, 0x4, 0x7, 0x2}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000040)={0x2a, 0x29, 0x1, {0x3, [{{0x8, 0x4, 0x5}, 0x100000000, 0x40, 0x7, './file0'}]}}, 0x2a) 21:02:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:02:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f00000002c0)="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") 21:02:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x8, 0x80000000, 0x2, 0xe, "0a43ab5873f3c87f30ec719b5665e8d225f3b8"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, 0xfffffffffffffffd) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="83cc89a31cb0354fbe27b174a79b633e8ae58b37bd01a6b0fe1c39c80b5af25120ea045b52f5c351df1cba6dc02911bc999136d8197e05c0cef3a3c3e2f1b661759342ffc6") 21:02:18 executing program 0: syz_open_pts(0xffffffffffffffff, 0x799c40) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b31, &(0x7f00000000c0)) 21:02:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x4, 0x2, 0x3}}, 0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x1f) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0xd9c6, 0xffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, 0xfffffffffffffffd) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 21:02:18 executing program 3: keyctl$clear(0x7, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x104100) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', r2, 0x4, 0x7f, 0x3f, 0xdfb5, 0x20, @local, @mcast2, 0x10, 0x7800, 0x8, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', r2, 0x1, 0x7800, 0x1000, 0x0, {{0x3e, 0x4, 0x0, 0x7, 0xf8, 0x65, 0x0, 0xe0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0x4, 0xfa, 0x0, 0x6}, @timestamp_addr={0x44, 0x14, 0xd5, 0x1, 0x7, [{@remote, 0x1000}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x4c, 0x8d, 0x3, 0x3, [{@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x94cb}, {@private=0xa010101, 0x4}, {@private=0xa010102, 0x7f}, {@broadcast, 0x2}, {@empty, 0x5}, {@empty, 0x1}, {@local, 0x101}]}, @lsrr={0x83, 0xf, 0x70, [@loopback, @broadcast, @multicast2]}, @timestamp={0x44, 0x8, 0xd7, 0x0, 0x7, [0x7]}, @lsrr={0x83, 0xb, 0xc3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @generic={0x86, 0xe, "ee6e0b5cc86e64eef423985f"}, @end, @ssrr={0x89, 0x13, 0x29, [@private=0xa010101, @loopback, @rand_addr=0x64010100, @local]}, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x3, "98"}, {0x1, 0x5, "03edd7"}, {0x1, 0x12, "ca40d5b570a9d9cafbdd9d86791b0443"}, {0x6, 0x10, "58e70049ef72db4fc03130c00749"}, {0x0, 0xc, "f504fb6ccfcc6cd71ffc"}]}]}}}}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8bf0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)=0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x6, 0x7fffffff, 0x6, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x1000}}) 21:02:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r2) r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) r5 = syz_open_pts(r1, 0x20800) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000580)=""/76) ioctl$LOOP_CLR_FD(r4, 0x4c01) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r6, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x40000) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042ebd7000fedb00000008000200020000000800010003000000c78e020002000000080001df000000001e807c726070c52854d7eff84d39495125885cd4a965ed2439f7d6af2b13c04769306d91ae958f6e82cf88b1ed41f27740828ae381b38fa5a5ef25b1f41f1cda20a8f0334b7c8b228fe0c222dc6d898460353fff40dcf0474fcdc4fa02edaaeed3f815000000"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4) 21:02:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x3}) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, 0xfffffffffffffffd) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000080)={0x6, 0x8}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 21:02:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x14000044) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000e00)=""/4096) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRESDEC=r4], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="960000000d65c78cf4cb53685af699ef8cda9617559d84eeb12d93fdd41e6eda42a840f15311dc992c7a86fec7fc7cfc719f071026698cd806ac327ccc1d0caa06d762d887a5e37fc09d712ad392326f12ea8bea2b5ffa4fe1ae22d22a81746d5cb49d86e4b2a9a1919fe7f5044319ee98c310d3d04482fa5f705e8acf7408ae2ad974df60ae131058d39b3d7c23", @ANYRES16=r3, @ANYBLOB="00032dbd7000fedbdf250a0000000500380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4000080) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x1400, 0x81}) 21:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, 0xfffffffffffffffd) 21:02:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0x17, 0xa, 0x101, &(0x7f00000002c0)="19ecc0b1604b9c17ecaa5e154c41c0a0f089a4b6f45c65f4678261ead71d5ddeb63dc6a9433a6e3363212324862c7c0e2d08ee861eff9da26fca0d95a515f4fd15427dc2c1e8abd963d7d9bff0cb44c72038256a86e07d7c3d16710456361602ad7799da5a2f4c46642bc978d615273acf3c1e72728bb75f5112ad9189eb8df78640382c959730fced3e9862fc25a2a9bd023494ac94d0d7667c01b4822e9c589a114fdd4edeac223a9099059587f21c8a94f4c6d83db829035799737ed4f1d33e2a0d835252ac7e5968fbbac6ade377fa95df6459b5fad6a9107954cb4372adb07ab361853084df4d5f63ec136efc4ce7cd675f85903ffa2ce32d2c0fc10d1b36676253bbce3caf958b63b803b1327503a98b3e556e2ea40fe640e822c0ac170ff172e0c0100c0bcd439bc7d086cb621e76a147202a2708e6cb1dc829b9cc4c8510ef3eb58c7999792ea1f8e75a56d03d64a0e62359e2ddb339d93c47eb859ab906646f0972b3f247f61189652cfb1d3c62a6202acd7bf838ba837620dfd81a044e351f24453753c9c7a8cc4f600f2e20e2e1490e29d4733721c143466959f02cb852ee79a6ada322d81e88b85cdca3df11a6e34e1fd75718f0878b57409897736e6f0dd203922490ea8e2828f56d50f05159dc723b94ca7704ddc34c0fd3e3466c031f1f079f158bf39b587a4ee2f9ff2a94fb3e4ba026900d82cd57760b1e021c8134e001f17d4786833d63d0b1dd0aaf0ce3717c9dcb21f1375320c704dcab1e710d6d6afd234650335f6c2fb51e71366d5b07118546fc6b6ff91ad86164f9bf589bf3e8d64fcc130fe03c45098528b6c0ea8fd5d2871fa650ad68c5496fbcfd150031c070ce88124e267d088c76235ebc58cb6e671b74a9e1e8a7c30bb25a030cea5b9801de1a5cdf0aa39ded0623f2d4531ec2e8a61dd65d4ee2435e25719ea4a331b902374a10e1b10e8a307a295222d8cff622eab994dd74becf5e8a1a78ec01139a653c82e2695ea17e7b68d391e1e1988a62e3363d7c1714b5edf490297dee74a23781091066d9e9eeb890e57a01b0b4f0df06918ca71d8716a77d0b4f07e3daeb6ddbb6291317544a9296b2f6e25971982af5d4e1fa021254a3ef0718325f361dfbf7341cacfd00043fff718b83cbc26840a634bfa4fea2dedd66982597f28c8cf1d3a66057826816254932601ede2c32e30332fa401fa1496140ed8a0a7bb9cc846812825f545f9b3b4c19483c6b6f5f6480b5c8fb70e62a1f9b67963e7d69d879355e0f71b16e73252928fc4b2c1482a1e7a9372408c36fe97316123189e0985c62d5bfcf45a838149b8a1284c7fc1496b670244d289d9425ea808ec12b4b83e86ae0ca1e42a1b9ec9bedc19916ce8e939ef70658893d7a997fb608b00627d0dd2babdf0acc7823e40dd672728b1748166fa3ca53ad4342dfe5"}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='#\x89\x00', r2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x9, 0x6}) 21:02:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, 0xfffffffffffffffd) 21:02:18 executing program 3: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000001000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='#\x89\x00', r2) keyctl$get_persistent(0x16, 0x0, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b44, &(0x7f00000000c0)) accept$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_pts(r3, 0xeeecdb6e8f67779b) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000100)="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") r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000003180)="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") syz_open_dev$ttys(0xc, 0x2, 0x1) 21:02:18 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6c) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x40}) 21:02:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000140)=""/29) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0x5, 0x5}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b33, &(0x7f0000000000)="42456763a8efcc1d2bfd3dcd6cf2676f598bf3345702ddf0988eec497b3d7f4a4170d2aa6b4587dedd3fb154a4699f5928c3b6f58b96bf0ece6725b583ea22829394f80ad5f8dceeae17a454263d02a6978a5ffa87d01ac8e3c25652b84d254046c6315da875e81177759031d305cd1cb0ecf9d69d3678afcb5219ae75b7bbb573f4e20bc6cb9e2c5500fda73dffd2f41d3ce500"/160) 21:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x2ad5aeb9, 0x4, 0x0, 0x1a, "2ff78b6e36119a9ce3f07d605bee1884eae2ee"}) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, 0xfffffffffffffffd) 21:02:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_open_pts(r0, 0x100) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffff5444, 0x2a8e01) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 21:02:18 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xb, 0x101102) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000080)=""/99) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x8000, 0x0, 0x0, 0x0, 0x1, "12b7309da3d1d5b8b94e29720f8e578c433237"}) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, 0xfffffffffffffffd) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x8000, 0x7fffffff, 0x5, 0x3, 0xc, "c1a44d929a8bd879edf099180cf4b7009f0549"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) socketpair(0x23, 0x80002, 0xaf1, &(0x7f0000000000)) 21:02:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x84) ioctl$TCSBRK(r0, 0x5409, 0x9) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x80, 0x105040) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, 0xfffffffffffffffd) 21:02:18 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10fe42, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x2, 0xd2}, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000078354672728200859e0e2490b35ea3b84900"/33, @ANYRES16=r1, @ANYBLOB="20002cbd7000fedbdf2512000000050037000000000008000600", @ANYRES32=r2, @ANYBLOB="08003b00ffffff7f08003b000500000005003000000000000500370000000000050038000100008008000b0008000000"], 0x54}, 0x1, 0x0, 0x0, 0x400c015}, 0x20004044) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x17, 0x18d800) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b44, &(0x7f00000000c0)) 21:02:18 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) 21:02:18 executing program 0: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b31, &(0x7f00000000c0)) 21:02:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2c202) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1000000000006, 0x600) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2600, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) syz_open_pts(0xffffffffffffffff, 0xc00) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, 0xfffffffffffffffd) 21:02:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000080)="694e4b530fbfc32d01c321a20db3744e36c1204764d521070a1ed4fb166879df5603c6bebb415e5dd995ac5bd5987c1484c4080814812d549765ed1e46bf12f52f904b584d92e55b717aa3a3282ec312e48c7a2581f04a6874350f4452b9fad1f5f501d518cc2a0ae18b14f661009fb1f675586d6c63f0d9a722174685800acfb743ac85a6950788449e2fe2e2dc9c7367115fae6d2c53592dc053dc20f1149f35f38564f3e76253cede7bd0f1045a60ca4c86565200f77346cd5b01b40db068a1ec72d7aa7e31f51416c9d4df8f9b49db05cf1cddfdce14c356b7a3") ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000180)=""/92) 21:02:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x8200) 21:02:18 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6350, 0x40c00) syz_open_pts(r0, 0x400800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f00000000c0)) 21:02:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/168) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x3, 0x8, 0x4, 0x7, 0xc}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x41, 0x3, 0xc3, 0x3, 0x18, "b41b54c7841d7d422e106fb935c7b86d156aaa"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_pts(r2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r3, 0x40) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, 0xfffffffffffffffd) 21:02:18 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x200000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000080)="20dda2e8060c11d7b083528bab1d2e993f70c78dbdfe338a5c2060c1269f8f4cdd5cb7168664329bab980ff95686ec6e7fee366aae322bd17a0492c7a742f25eeb3dd4fd2e15a83d9ba3d52a3d79497166d1107e560b999fb6485ba3f91487850cdd63f2323aeab37b707c9facfbb2263bd61ee755befb14937e") 21:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xfff, 0x1, 0x592a, 0x10000, 0x9, "1ebacf67dc518df1dfeeb207b1ddcf5a2e9244"}) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f0000000080)="0e41339a48805324ae6335dffac8d5b4eaa6c7869dd4d7da29f4a7cc75ea149b489241dc772c597116cac5cde3159f0330f2c8b81706d9d7e5a0f4a62ac760e8595926b77f7a82c15e601e21120ccffc61c1119ada9e3e6c848aca432db3c3f8a670b3668f6b9ee5d1da841d9ccd2ee293c233124aec6793118572432982a6ef5534bbf06f66790f90a15b9e9b6f21055eff2cc9e42528f43611f93e9bd479ed35236baee942b18463dfb365800445576119dc8fdf9a3e89a2958d6c7c6af0027f85c503313b9147b6e5f1d8f04699a17cf81bb8b752255215d876ff6b063da59f671bacf95f5befac9d") 21:02:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:18 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3ff, 0x7}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r2, 0x8000) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) 21:02:18 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x158, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x59f9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0xed65}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x748}, {0x6, 0x11, 0x9}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x20000002) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x800) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffff, 0x20000) ioctl$PIO_UNISCRNMAP(r2, 0x4b31, &(0x7f0000000100)="c2b61eddf4958cb4f2d3600a84fa4826846da877ccf83ac0ac4f5dc66188ed1cb83800048de8a8aca7537ebcf34f01cf9febd1383a9d8084e199808b446594ddcd98646b0ec9b6dbd1a69a375dc905ae2cfe781b25313ad19c7c65ff1384ea7b04212acdd8cd69ba6a417a0a9a804633a8136e15d725e1ef7693fd6f0d45b69750743cf01ac166d0b19fcfe913cfc9bd7a42436324eef5ef72d904f1531653d81ffb0d74adfcc9e3870ae00f96da08995efb89c1cb03a90356b5a093cf3c764edc96a0e663325624d50dafbfe6748c2b3afd076199b5efb9519108c89d8972e4acb1d8f084726bc526000001000000000000000000") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000400)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)=0x1) 21:02:18 executing program 5: ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x5, 0xffffffff, 0x6, 0x10000, 0x1a, "816ff186e4efb7754bbb1a2103c8c1ae528bf4"}) 21:02:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, 0xfffffffffffffffd) 21:02:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x105000) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x800) ioctl$PIO_UNISCRNMAP(r2, 0x4b3b, &(0x7f0000001040)="fcd1fc0b08dab7223b281021a4b219b034f33c00d2955f673328e9783f9ade833ba3923d54b04cee9bb9bdb7902a1960acde12105547b0bdf09c5471d772729850b6ba4aca1668bc690d960f750e9e03a2924e6b55c5627b06f9f7aeab1e59bb081027a8503862b53aab2f0835e32a1f2bd257e0001013e2b24b7e53b726f66fca8647107beb11241f00feff59ceb824dc90bd6946f5d6d1d750977786a31fc57af20dd0096121d6290444ad0ef79de4798911081cdc1147f01a6d9b10eedadeaf44eded715a0426e2b77e84d19946cb1f69234d0be353917ec18d68844c59ce25afbeddaf780ca832e4e649f7a5adfdfc3fbbc89ba7e53bdb27560e2ee2e365f214270f7e3be08164d07fc8e084e7ea24a1f87821daf32dbb6143a2d3209f4459eaac3c18185f2351041350542efec817c2ffd453ffc2d8fef786187e5cb3ff9682b6754518c327f0287405c4418cc7b839ea633f42c9b0b24479312726395c27832495e62344b33bc2ed8ceed22a38e6f0a50ccb2bed0004000000000000e1973b9647d5eb8eab319be72a2fa4d6bae16badf61ae223a9ef4c26a391da8a20b4c4f364cd4143a6dfc165556835f8d7b16771945cef58ceaea623a2c408003db0f003d777cbb8cba697192999c52a8e2e07ecfe3d11f737e814ecdfce2cec2bbeed8605cdae9f28a784990f6f5d6e440dfa5ba2e98a69a38078234230de00954ac168c2c1dff40ab90e4bc59e58ba36d90aef71db451a52cf0b980e3928070e06000000c04c357169025b6a22d1d740794c") ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/4096) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000001280)={0xfffffffc, 0x9, 0x3ff, 0x2, 0x1a, "41c1d68bbbb5700f3a288030f12fea63c2e7df"}) 21:02:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b48, 0xfffffffffffffffd) 21:02:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/28) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x40000) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) syz_open_pts(r2, 0x900) 21:02:18 executing program 3: sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44000}, 0x801) socketpair(0x3, 0x6, 0x2, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000005c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x15c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl0\x00', r1, 0x2f, 0x5, 0x0, 0x938, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x700, 0x7820, 0x2, 0x885}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b44, &(0x7f00000000c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000340)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c048}, 0x1) write$P9_RSYMLINK(r4, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x10, 0x2, 0x5}}, 0x14) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) 21:02:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x8020e383) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, 0xfffffffffffffffd) 21:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000000)="218bf59375564784f52468546dc2ae059fc1d92f6bffe99638f9c48e4e3c1e204d8e93f32932587a3279a437e0e8227ba43d8e6987613ca9b97663b53a47674f") 21:02:19 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) 21:02:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/28) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002000a5ffffff4c933f2b142baaabc4c93a782e13cddb1aabd31e9719d22ef89c71de5ec7"]) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x7, 0x1f}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x0, 0x4, 0x7}}, 0x14) 21:02:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) 21:02:19 executing program 5: socketpair(0xa, 0x2, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0x124, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x4}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x48880) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0xcc, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x20}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x4ace}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8004}, 0x8c1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b33, &(0x7f00000000c0)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x194, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7999}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xfffffe00}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x6b}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3ff}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xbbd}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0xef}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0xfa7}, {0x8, 0xb, 0xffff0000}}]}, 0x194}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000000)="df19debd802ae782e5cbba84c2a93a99e69b794435301a119a0ab9f6a28799cf5b8cdcedb167d1006ce0107f567e61c060ea1ff7e1d2c9da5b08025d065b65b3f73c") r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x240, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7b}, {0xc, 0x90, 0xeee1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xe3}, {0xc, 0x90, 0x100000001}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x14) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x98, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000090}, 0x1) 21:02:19 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x8000) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f0000000080)="961643a1d5002f1c817852fe2721fd7a553f88aa97e2102734a8415341ca1676f67ff0e463c90aadb3482756e33f209fea8b6fd5660dc41a3f101ac9a0524eca0d73b9824b88bc0f06ca501129b316ff61aba43e089b9acda7fdf966eaa93e476e4d6921d0d35311e3cfb7ef6a69723e7aa96ee044d490d8531ce8") 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffd) 21:02:19 executing program 4: getpeername$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) 21:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/19) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/170) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x560a, &(0x7f00000000c0)="fc") syz_open_pts(r1, 0xc01) 21:02:19 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x2, 0x48, 0x7ff, 0x5bf, 0x5}}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r1, 0x800) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xf778, 0x10300) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, 0xfffffffffffffffd) 21:02:19 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b31, &(0x7f0000000080)="7ef65bcddb4693ed6ea675a43198b152abe76a8dc1d8cbfad4944a6525285c440146dc42ecdad05707d80030454c3fd37bfd18f209c74fb4667c0019a1ec2c71869c608211d175661be5d7d649e5ff570bad957ca2a7fe3a748b6f4e057f0000000000000000000000009bc2ce398cd35ca8efdfbba5a85777000000") ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x80000001) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000000)={0x6, 0x80}) 21:02:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='#\x89\x00', r2) keyctl$get_persistent(0x16, r1, r2) 21:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x80200) syz_open_pts(r1, 0x2880) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x102) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 21:02:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000040)="5a042eb1cb33991097d9a8df2217ab84f3c6ed0efab7f5d7b575b7528d52b1cdf4b436fa10aca804e218b1703ec24b850fe0dca3310d8a80933d527dc44e9caaa8c98d7bf87e602a5268b656113d6fd7ddf8e34714ab6041cd9d7f91da5adde8be96b7edb9c9a87f9cd4d931e388cc6d0f0d0211ba799bf2d6eba825495e598d75594260e89a281161f59d43a58a73acda9e44c7") 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, 0xfffffffffffffffd) 21:02:19 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/134) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x4004040) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x1, 0x3680, 0x91f, 0x7f, 0xf}}) 21:02:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0xfeff, 0xe24b, 0x5, 0x4}}) 21:02:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x79, 0x4, 0x7bd, 0x7, 0x12, "b267030d8d424e271199ee34443ce38d63d462"}) 21:02:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="f402c3bd707608dbdf253fd5938170000000030000dffff96dc2ee4a0b00000011fc4f7100000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x44004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_pts(r2, 0x121000) 21:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000040)="cdd02963572ddd375e6760ffd7bcaf6b2bfb41bba9f37e34e874f3ef51af45aacaf9a21d2c533b40a855b891084dc95adaa6b4fa1c4fdd43bdd4d3888adbc99261e36b47081260d769957e77a316913f02ffe4ec348dd60358e840b8a4b5137695f85fd82b2b1416d035cbf06b571692164d3debbe8d") 21:02:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x18, 0x1b, 0xbc, &(0x7f0000000040)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000480)={0x1000, 0x4, 0xfffffffa, 0x4, 0x19, "368c1ee9cee83d1498a0ba7848ba5eda3f0ada"}) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x29, 0x5, 0x4, 0x40000000, 0x1, "71c30d47d088aece90dea71a14e31915ab34e0"}) 21:02:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000740)="fc78a2f062e2434dd2d08f17f03436b8801ce431b0b32f71791bc1a12100b1f99f1643fec5a2f2ee8671557b0a7aecc4008edd3bbe367bd60a85532c2803b0b11ea93a8d1c1f5fde7a4decb911874c111d5057cc77549ee2141ad39717078cf94e109606385fad225c863ab088055967815fa3e5a3efa568818d16fb6a2b9efe6d4c63227736e2d8e1cb6e0ddb2cebb8e3f3d794f425ea417652e330edab7302c3d260f5db4fda4e8323844afaca57f18ff5e272347549255db2b6dd513db57710c027e19caf579845fc7ed6fc2f71c4612291c7d0fff1ea4f7c163d58b7e81678171c4f5b1ab6e01f9e225b2f8233ce07fb79745f90f0486d9ce592106335a1b69c9cfecefa16fdd8419bf4fd76a5dea6eb7db29446dd5ccfea73ce665c62ee7fb54e98808e48b3b592b058b1c7f14a3a91c647768b23bd41920284c68aeffc85730e5311c15c86987fa71f7f96cfa88b569cd182f98469b0fc215237107a5981eea6d9addff76a445fa478fb2e755ea2df1cdc3c69b099453a61532cdc394bb795abbaccb9b9f2a6b483a8fa48b65bd8803cc6398dea6bc1fc50815ff814c10f2aa78341ad9ec658d70231579b4178deda235760bb37922b79abe59270dbbdf74ece76136f0d9936481408b3ee5347114ca511ee405132dbe0db9cc7e6993134856c2c0700c2ef5ebffb1685097f63f4e49a52b7791fd7211c5c7ccab5ee085be318eb3e47c0f913c5d7187febf03afd98fed7cd7c0c6ef2ada55e951a3579e5d88821ac62a97555dbe38e86ad391fddb9acc989565fbf222fd50c315aacbf485252bbe50e9766b1ffe600718137d56baf7325cf3320f8c5176a5049d6a3cb212e47feb4c546573a3f1411866ec8fb756620568cdd5171850600c579ac281474e5dee27f2e58360a9bb56ccd19a03ada94d16af1478fc378fae1acacabfad404130e58e6986c65b9adb66108ab0a311267f71fd8df8fb3e02c6f1a38e394908875e05bb60ddd9419662933ebecd85c1d9a347165b9d78e274c437e3452edc193756e1c48d11833fe49edb6c9b29e7d240c196051f242384142f0e8c2f90b433554d976a291c7a2faa566574721a67efe3d564c61876d1dabcaa32956346201fb24799b872515516b7084a28e07df979b76a058219d4df8f26c183c466fc4b136f90907e340367f5e448a048f6429b4bbc2c7b14cd65704029691f764a623ee7208ad4220e531f939610c67c6efb44ab69ee1dc4592221541ae0e7a6de85c48b0c4fea0e5d5900704365eb28d6af762a63a2d556da2ec9ac90d1f7cf6bc1625ade8e8e22b4ece2843201961427b53862ba1e590526b021d61da00ee7283058b20b840a5fed049d41285a46a48ae413670a5521dc567a723ce7bb9561024388ff2c955002b1fac7e43aaf53dc7eaaec541d03ca7aa333cd9304eca4dafdd73ae"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_pts(r0, 0x80841) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x8000) ioctl$TIOCL_SETSEL(r4, 0x4b48, 0xfffffffffffffffd) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x4, 0x4, 0x2, 0x9, 0x5, "2759ead85dae6df65ac58718f4e62b3dcddc0b"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRK(r5, 0x5409, 0x7fff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x711}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x223f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, 0xfffffffffffffffd) 21:02:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)) 21:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_pts(r1, 0x40000) 21:02:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001400)) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa8799096d834265b, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001380)={0x0, 0xfffffffffffffffd, 0xaf, 0x1f, @scatter={0x3, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/251, 0xfb}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/4096, 0x1000}]}, &(0x7f00000011c0)="a367cd4bdd6a4be90b6b3518180eefb595aa3cfee33701ce563dc517ea4c9466eea8e17def0637f39df67542b1bdc566e3039455c0bcf6fc4938e151557c321316baebce6a0f8244cb0969be1bbe47e87ce2595134883975e57db0f1e3f13fba4f982a121fb8e379bf62c7214889f41e5bcd96b35eb553b3f73d4024d53ea5fb2a26db06e4ae2f4e708296fdf65e335530992506a7a3371f49ea076b7e671b70ecccf1e942afba8290cafb0da2156b", &(0x7f0000001280)=""/146, 0x81, 0x0, 0xffffffffffffffff, &(0x7f0000001340)}) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) 21:02:19 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000440)={0x14, 0x49, 0x2, {0x0, 0x1, 0x8}}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000680)={0x1, 0x537, 0xffff, 0x0, 0x8}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010001000000"], 0x1c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b44, &(0x7f00000000c0)) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x6, 0x1f, 0x56, &(0x7f0000000000)="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"}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r6, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r6, 0x0, 0x20, 0x2, 0xfffffff8, 0x20, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, 0x7, 0xd24f5d3945e0b683, 0x3, 0x8}}) 21:02:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x0, 0x13, "e22dd33a82170c5796c2ada9960a3e2da51301"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x8, 0x4f22, 0x2, 0x0, 0x11, "d6d323851c9d7bbac515d48e5dc005df8b14e2"}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000080)=""/158) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000001c0)="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") 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, 0xfffffffffffffffd) 21:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x100, 0x3, 0x0, 0x200, 0x4}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:19 executing program 0: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/37) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) 21:02:19 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1afaff00", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fb0000ff00370000000000080100008000000000002a000000000008002c0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x10000, 0x7fffffff, 0x200, 0xfffffffd, 0x5, "f5739ce7983bf514052f6b4396ebb72f8c0dbf"}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x887) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000280)=""/111, 0x6f, 0x12042, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r6, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0xc0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:19 executing program 1: socketpair(0x2a, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f0000000000)="7fb6c7f24a32becef26d8b6c35d400e962276921fe99098eaefa5ddb70c280251901cc227b285213b9348f2f712010f871c6b5faf41f2df615edb9dfe7d3a9a1d50e00b9846bef7cb72ddee9a259ae7b08a6af7b509a0a292ae9795ccb179b15ed36164eabac65c68bd720d51c32cc3d3500b25b0a47a2b3feffcee6548087e4e9072d0a18d58236b6cdb47007232fc17729d300a29835ecc573bb81081100fa665238d2db57c08cd8b6db85e59a1f8d99766299d8fc8461ff1109dd2bebd28e99e830bc5578c467372902ed0b17") ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000100)) 21:02:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)="98a1f34815b8d76ec3533bcd8cbbd6982ac500f7d72b95f0e842988e76234df1d81f386df7ca4dd574f116f42aaa3d743b518683b1fad8d6938fc6204088f8ba4f75cc8066db71ba0335d3bc24994acad5bb2141b05a8137b357f2ae4cd119e34f4a09d92f257f62be61bad2664a264a27ef0cf821625ccd7dca75c3b160df0f3f08aba1f4a0b455d4c8e789ce77c63d28c6cd37b10eeafabecebd160811acb8c6295632f0bf2590c5db302e4d0001b994f171d067b69598dac0ebb2b52d12a4ff56137adc47052ed786e4c42ce520f200"/230) ioctl$KDSETLED(r0, 0x4b32, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x54a) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, 0xfffffffffffffffd) 21:02:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x9) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x20002) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:19 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x56f3d8ba, 0x490840) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x4040) pipe2$9p(&(0x7f0000000200), 0x800) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x320, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x20004040) 21:02:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) syz_open_pts(r0, 0x5e9d622c3351e93d) 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, 0xfffffffffffffffd) 21:02:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x56e) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x100408c0) ioctl$KDSETLED(r1, 0x4b32, 0x7ff) ioctl$TIOCCBRK(r0, 0x5428) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:19 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x4, &(0x7f0000001000)={0x77359400}) 21:02:19 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x711, 0x10242) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b9989d9a4621"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x4000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b48, 0xfffffffffffffffd) 21:02:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="7bb9c2c81bc5d587330c9d88122e3a33879765515a749e8d8c93d92e47c00496271634e00bcc3bea2bdb726e5f4ed1194492604f2b9de548d22ec1832b784026d9502373f4447b437aaa556f6c2d6e501fadeb99a30a82fec07a6cbeb1c0d27383923555b55d2b26986098a383c123a201716b5695533a04c14f30975979352785ce6bdb926b3c0ed30b3d4fc1f0e848dd77f98b") r1 = syz_open_pts(r0, 0x8c080) ioctl$TIOCCBRK(r1, 0x5428) 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, 0xfffffffffffffffd) 21:02:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000200)={0x1, 0x8}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x2, 0xfffffffb, 0x0, 0x9, 0xd, "62275a63972f757b9769ad41c327ee7cb1dfa0"}) socketpair(0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0xfc, 0x1f2, 0x3, "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"}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x400, 0x81, 0x4, 0x36e5, 0x8, "9eb7d82ecf29736c54162b5e8b8c7aed9aedbf"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 21:02:19 executing program 1: write$9p(0xffffffffffffffff, &(0x7f0000000000)="42788b5267a32f60053e99215a0fc3d156f5886ead82a47f8803651fedc60a442e0e6818db04f6ec57f13cc2a6a63df81f6143649bf86a995c21d230a18682257816716c1bffb0fd523ee81ece07dd93cc69ea805ec2970d2fd93660119577d76348af1a45956c505a77e8449fcc448f354c93e119441cc4490e8222d35f9f052832fc0f2f68bd463881fdeb68e50672ea1fcc73fb674fa38cc7086f6ef1800d444997fe0df922f4bdfc6ebe", 0xac) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x48000) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c851}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b3b, &(0x7f00000000c0)) 21:02:19 executing program 3: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x2, 0x91e, 0x401, 0x0, 0xd}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0xffff) 21:02:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, 0xfffffffffffffffd) 21:02:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:19 executing program 0: write$P9_RATTACH(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) 21:02:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x4, 0x2067, 0xff, 0x10}}) syz_open_pts(r0, 0x200000) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x169000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x4b48, 0xfffffffffffffffd) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x40140) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) ioctl$TIOCCBRK(r6, 0x5428) timerfd_gettime(r5, &(0x7f0000000080)) 21:02:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0xd625, 0x10000, 0x7ff, 0x1, "d378c017616812a321f224d8f90cffebf176a0"}) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x0, 0x0, 0x8}}, 0x14) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, 0xfffffffffffffffd) 21:02:20 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)="4a38fa89258b4e0000000000000000150000293da3a9e95a8052") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x20, 0x0, 0x5}}, 0x14) 21:02:20 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0xb, 0x6, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="48ae2128721a45dabc107702d04006925c9fafb7c6461a6995c3506607bcb983643340fed148bb3363a8b803477a0ea1ba28eaa8f18075d7e83c13865e2046d5bde7994f77b056da7dfb3adfe5ba19418a5f054c9ae4112967f303da9e26132db60ae56889934271759e58696bca6dc4cfaf853f3d461dcee7e14c8ac7be2ea551bb23353094525ca3ca1c2248236b240e2722a853ffd8b2d97d8d62efd02b5a5397ac57e620ddbca5cb7b8bb4625714186b84fa9d4927e15dfca792a47c1de42a581779b3cd27f794c4018efb33be06d1a4ab829991070012b04eb7dc361912d76a42347c7e855073a5276a953824223fdeeeef") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88731bccd9ecf45d18f753551e04ac05567b9bbf92dafcf231c4e41cfab3229628de3688115cdee229201c800d9ccef4a449cad3e3c2", @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x200001, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r6, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb6d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048180}, 0x48085) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f00000000c0)) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, 0xfffffffffffffffd) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:02:20 executing program 5: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b33, &(0x7f00000000c0)) 21:02:20 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffd, 0xed, 0x9, @buffer={0x0, 0xd9, &(0x7f0000000040)=""/217}, &(0x7f0000000140)="6d784693b59b9d52b1fd09f2ceadff84093886bc21eea44bab8e7f7b6f5ca3f7951f7aad0b91853103e9bf474f3392655f1303ddbfebb2384e3aef7f1e341f4633ad9381bb1e8947d62ad044e39bbf917c5dc0f8b13e51f6624a7dd8824bdb8bfb0521faf2c6db51a56e5216485d484905ab223fac22d153e70257964e40008e3a652aa81d4f91f5c3bae7efcacb70843f79aa16b4d0e1999821a1c4e5f209a4bfcb72166c21737a1257c6092467ddae54bf558e8c09c731fd805191f125c3c1b80e39fd010a8cfedb08ed07ba004e6627cf2bcada3a27cf11f0af03315362972df46052cb9a8afab902901fad", &(0x7f0000000240)=""/71, 0x7fff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)}) pipe2$9p(&(0x7f0000000380), 0x4800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x200100, 0x0) write$P9_RAUTH(r1, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x10, 0x1, 0x6}}, 0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b44, &(0x7f00000000c0)) 21:02:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) syz_open_dev$ttys(0xc, 0x2, 0x1) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, 0xfffffffffffffffd) 21:02:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x35a77fd4c3d4e4c) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/4096) 21:02:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x6, 0x1000, 0x6, 0x2, 0xa, "8fe8d73bec6bec5fe2d9d8e858a32fe5c57398"}) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x12000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="4bb5ccf272184a6f861df0d78864f6a93178a14f6c17ff20bc8a3984a0de6a7ecbf7661868e44183d3dcd27b3658b742ad95cdcf98fc4e") ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) 21:02:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000001c0)="2e1217d0a7cec6ffce6a427537360ccecac3835ef02225de88ba993da4cec3c0a2580923b73b227b090011c1b559c7a08b75a0e49bc5a421b64129761e7dcd1a7b") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000280)={0x80000000, 0x400, 0x0, 0x46, 0x8, "28f91db288e0b09fffdb31fe60424b895ca3fb"}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r6, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r6, 0x2f, 0x81, 0xf1, 0x1ff, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7, 0x800, 0x57}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0xc000) ioctl$KDSETLED(r2, 0x4b32, 0x7) write$P9_RAUTH(r1, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x40, 0x0, 0x8}}, 0x14) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfb) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e204314", @ANYRES16=r7, @ANYBLOB="00032dbd7000fbdbdf2506000000050030000100000005002f000100000000002f000100000008002c0040000000050029000000000008002c0002000000050038000100000000002e0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x44804}, 0x20c4) ioctl$KDSETLED(r1, 0x4b32, 0x4) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000002c0)={0x3, 0x9}) 21:02:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0xffffffff, 0xa0f}) 21:02:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/205) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 21:02:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa412) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, 0xfffffffffffffffd) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$KDSETLED(r0, 0x4b32, 0xff83) 21:02:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, 0xfffffffffffffffd) 21:02:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6bc) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="7a89224befa19cbcc33cc7492ec1908aafa9695ae501e17cfc4451c02000b1f8ee12e7c6c4f8d1") ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) 21:02:20 executing program 0: write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000001000)={0x14, 0x67, 0x1, {0x8, 0x1, 0x3}}, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000001080), 0x80000) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000001040)="30600f103ff7cead669c16f3395cdb4245dd085db3b781eab2ff4d40e661") syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="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") 21:02:20 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xaa, 0x7fff, 0x0, 0x7, 0x19, "48c3fa985abee8baea4d686668f31759f97029"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0xfc000000, 0x4cd, 0x9, 0x7, 0x16, "502c17bfff870da98655ef6028eb20a2496d9b"}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x10, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x810) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, 0xfffffffffffffffd) 21:02:20 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b31, &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="277200d3e79b59acd985a12b34fa59cc5d913c20fea7db51fc930a25beb0da5039799a5b4b3e6635ff05ccc447be3b9553ed82ebbc3e2c046157b5042261066dae62a69e848080f7f275cc2d2c04c0d3a0de96d39d5c71") 21:02:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$KDSETLED(r0, 0x4b32, 0x9) 21:02:20 executing program 3: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, 0xfffffffffffffffd) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x145140) r1 = syz_open_pts(r0, 0x803c0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x4, 0xf97}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0xd, 0x1f, 0x1ae, &(0x7f0000000080)="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"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 21:02:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 21:02:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x600, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5218}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20004081) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000300)="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") 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, 0xfffffffffffffffd) 21:02:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x8000, 0x5, 0x7f, 0x3, 0x1b, "6b5c264575ac00277218bf18e1e157cc6f7756"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TCSBRK(r0, 0x5409, 0x7e94) 21:02:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, 0xfffffffffffffffd) 21:02:20 executing program 4: accept4$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e, 0x80000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffff308) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x7, 0x8, 0x17e, &(0x7f0000000000)="7fa3cf8e97320b97bc229eb3b3624a5ae553a87db483885d1ed7b797bc4f7ae7dda0c75fb9bdaf898704d66196c1b2a4002e80f4f1dfb74ff5fbb20f680f6038854e0580172c71d9ecfa1c75d18dace03abd0d3ddaac689059ad0cfcb2994c9e0b2e34892de2dbebb68d0f66292ca9f5b8729772ae8eb83038dbd7ce770288c4fca6d25dbbac0746df15c01bc881f1f6411b4514e640470a89642f11389aa8cd42de2b92cbfbf0d5c4f8884525ebdf14ee9feab0fc2b9b457cc935ae35d56af598f8fda1e48fca7c6e976b22c8e96e9451757d579998f756315e72e1be50ef34fe3cfafaed2cafa8d7cf2eedecb1e995dac4c7c6fcebb9dcafb406cccb8b599322251a0bc83e6d3a5a6528a246174fc61460ff461fc9b01e25becb8e093673cdec4f87eebac2fae3bb797a2089ec8404b362b0ac6a86ef48f0415b42a30b252d4a8bcfcc64d8611cba000ce45b4dcf58d6d8824d2cc449df4b134bf71993aa48a820228b1cbe471278d54da7d5c55b5d754fcbb8b06a79bffa67d868f9211956a980b87ecf492b77d9da1c054725efdf050488432efe81186d94085dd59e97d170eaacdeb4a45bb3627652198b07fc8c4ff04fc9bfa098451abb6897813d5504690c416c20d542b57e338d9509a38e3dfd75d170a60055f26bf2bca21f57f4db2d707bad7176b20e19087dce019cccfe1afd70912fd2882053870a3ce5937e486e06679e68cd43c40a362f18cad4fe3a2411868dea012efe6cb29025d99c1f576c725d21d0c30a5240037c3fcebb721f75e085cd1499b2a3f807ccb4c76b5b7f471a746ea520d2abd32ec1762de2a745c2d977726fc8dea3461b3365a46c7d4ffba5671980375c0602eac6fe5964ed909b519ed70fa51b66e92f6c0af750ac39fe3dae84765ff400c3d0c96f2aabc61a842a74a95e879921728cea8515a75d742e0a849f6fa0d76e138a0ad9ea827ed18e7d28868b1c35b5616f7205b2d7a607bb83797cac9b8b4ed22a2191c32b330d76017ef0fbd8067b915502059891688be4cfd38d1dad4734082c0d8524104d35f7738561eeb9813c724919b569aa6a0edc468f3b8d20a84d18dccd2f28c4a76de858b763c90312c08d3fe564ed34c9973322b26b1db57d9c95d7d5590e473171cde9c9f7b9c8193cb0b3e43b8fbdef715b6fda73fac341897327f5b965b00136430ee0715a5efd815fd9fb8d018676ca6adde440b0dd0338096ebe7a7cf43292b0faec86e2315681c4cd78d034cd31dadf233f589a0989d7e0644ff5f77b545f9bafea190a65a7e4411f126c7a50d810a554f7d982bfa354217e7045d3e4ff344db058b164b97f23815e81236c95ca27f2b1084545d32fad8aae1648ca0e351b56863c29e7255a86b6ab921bb3dd81dd8d2e7f4d3a274fdf55ae5b492a87716e906c13018b9ec6b4c91189e323bbe1bd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x10000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2ab942, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x131801, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x100000001) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x28000040) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000440)={0x774, 0x80000001, 0x0, 0x0, 0xa, "32de8be6471f530c1b4c253498ac22f974ba50"}) 21:02:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x9) ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) r1 = syz_open_pts(r0, 0x123501) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/44) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCCBRK(r0, 0x5428) 21:02:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x3f}, 0xf) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0x400) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000080)=0xad9) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:02:20 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, 0xfffffffffffffffd) 21:02:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x604002) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x7f) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f00000000c0)) 21:02:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, 0xfffffffffffffffd) 21:02:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000000)={0x6, 0x3, 0x8, 0xa15, 0xf, "c74078aef8837e144f00024f7e843a488e18c9"}) 21:02:20 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x1f, 0xff, 0x0, 0x947ab9a6e7c1aaf2, @rand_addr=' \x01\x00', @private0, 0x1, 0x1, 0xb9, 0x3}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000100)=ANY=[@ANYBLOB="b500000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000a04c1aad0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000638b24d789fc4a452c22f3062787b95fc55a"]) 21:02:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000080)="5346aebb05e08d86ffffb25a0000000000") ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:02:20 executing program 4: socketpair(0x11, 0x1, 0x7ff, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x15f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}]}, 0x3c}}, 0x24004041) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000100)) syz_open_pts(r5, 0x58382) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r3, 0x4b48, 0xfffffffffffffffd) 21:02:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r1, 0x5409, 0xc13d) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 21:02:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, 0xfffffffffffffffd) 21:02:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_pts(r2, 0x800) 21:02:21 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)) 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, 0xfffffffffffffffd) 21:02:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/33) 21:02:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x40, 0xf3, 0x1, 0xe, "acd28ae6deb33bf1d012a5ff167dc1a142e8cd"}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x160d, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x248c01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x120, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x29, 0xc, 0x81, 0x8, 0x55, @mcast2, @loopback, 0x7, 0x20, 0x1f, 0x4}}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f0000000040)="1b6cec47f0c6fa967f5da8cfd36d9681cdce5ccf9a1e27") 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xa97e, 0x4, 0x1, 0x80}}) 21:02:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xb8, 0xcd5a, 0x9, 0x4, 0x1}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:21 executing program 5: getrusage(0xffffffffffffffff, &(0x7f0000000580)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000640), 0x1000000, &(0x7f00000006c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b33, &(0x7f00000000c0)) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000200)=""/247) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x1, 0x400, 0x2, 0x2, 0x4}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="43456bd61c99d856e3a22ef55c68d0b9ad2ced58263f9ade8a7e55ddefb432", @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r6, 0x2f, 0x76, 0x4, 0x3, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xae}, 0x8000, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00 \x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fbdbdf250c000000050038000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB="08000b000300000005003500bb00000008003b0075c4000008002b006900000005002a00000000000500300000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x600c000}, 0x4011) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, 0xfffffffffffffffd) 21:02:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, 0xfffffffffffffffd) 21:02:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000180)="574b978688cbab73f71738f03b2afa75bd2e8b9858757455f355024718d51276c513e5347870eda33300de0823dfc2356c0d14e3c59b84206995f66c493c4a8a990586001544007a660af123a2e0e68370f4be2672941297c6a9cd43e20237437337416d72927c4da6ca88a3e5bd48cc019769d3a41b6699a5d943c8f1b371db9e19e5005faa34bfedf9f9607fc52e94fe68c09de28b0303b5dd8964bc7527972fc11ed322fc87a190c1759de75f32bd22a9cffacd24062af3854e3a56a47b1e19a40172fe388b0c73aa15283f3dad5f108f1d230d58e8202fff0b70844efa66555a980b90cc85b328a200000000000000") ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/87) 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000000)="bf79f54b2f927c4749f80814c627c87cf4dd1465af624e73a1fc39cb2107258ceff82e7ac63b775de1e10a3c208d2ae857a573f3b3afb1d062969470e4e40fb0866f6ee7fdcc5b82f665caad65d54a53") 21:02:21 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x402a02) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r3, 0x2f, 0x54, 0x0, 0x101, 0x40, @local, @private0, 0x8, 0x8, 0x8c, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r3, 0x29, 0x2, 0xff, 0x5fec8ac7, 0x28, @local, @private2, 0x1, 0x40, 0x1, 0x9}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000680)={0x2, 0x0, 0x19, 0x1f, 0x1ea, &(0x7f0000000280)="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"}) ioctl$PIO_UNISCRNMAP(r5, 0x4b44, &(0x7f0000000000)="1d17094366781472424956cd0fd5e3052c2a72489e85fff06bb6a97f09039562") 21:02:21 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 21:02:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, 0xfffffffffffffffd) 21:02:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x40) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2000) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TCSBRK(r0, 0x5409, 0x0) 21:02:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="f315fa4adf6ec97ebcc40d22d525d7006aff8f0c946e347c6fbba4bc72c52f6ef1335565e9440fac373547f804ca1aeb064761a41465830987648e7517e2fcdaefde682e8f763189b76fd8a43de63fa1befceb62b04362242bba0523f4ac321f6ba41ab39270ce53db17602d1287eb19e5676dc681ffd1bff36115482261545898e4ae42ff6bcbe8c733762c5ae59661a8a9e41fbebc25d4fa0677904d51e908e095f68bccf12a7d55d6cbaae5e0b860c9dc7384bd0a6b41442093191655347703484fcc449c4b2e90d6a56f0bf0aa9f11f2f6fb509a8599c3ef21e5954b1bc177d1342fcafc25094a0576e2b199677ddb39") 21:02:21 executing program 0: socketpair(0x10, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000010", @ANYRES16=r1, @ANYBLOB="100025bd7000fbdbdf2507000000080031000100010005002a000100000005002a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x6010001}, 0x4000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x1, 0x2f, 0x400, 0xa175, 0x3}}) ioctl$PIO_UNISCRNMAP(r2, 0x4b31, &(0x7f00000000c0)) 21:02:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, 0xfffffffffffffffd) 21:02:21 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4042}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f00000000c0)) 21:02:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0002, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x44040) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:21 executing program 4: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x29, 0xc, 0x40, 0x6, 0x2b, @mcast2, @loopback, 0x1, 0x20, 0x3ff, 0xfffffff9}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/16) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x880802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0x3, 0x8, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x20, 0x1, 0x1000, 0x3}}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x218, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x198, 0x8, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2e3fa65ca6bac4cff0df9c29f2df01727835562dd4602362e4c5f4c9a0f0c8db"}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8af0f0b3fdedd8cf8e44a3dc19fdf333967360fed71da6c72ef9e10d9eb1b615"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @empty, 0xc0}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xf20f, @loopback, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @local, 0xffffffff}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x218}, 0x1, 0x0, 0x0, 0x40000}, 0x40048001) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, 0xfffffffffffffffd) 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x3) socketpair(0x2b, 0xa, 0x1000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 21:02:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3b4a16b4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x404c041}, 0x8000) 21:02:21 executing program 1: ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', r1, 0x2b, 0x81, 0x0, 0xff, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, @local, 0x700, 0x10, 0x4, 0x1}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000140)={0x6, 0x5}) ioctl$PIO_UNISCRNMAP(r2, 0x4b44, &(0x7f00000000c0)) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, 0xfffffffffffffffd) 21:02:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 21:02:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="8f00c9bc35fcc3d25b2574fa08a35047e45a2183648cf904986317bf608fad992942585955edb879720d2c530bce3c1acee208e8bea9f255c48fdf471c6e75e23eb56e22c0b90c9e44a042656737eca47fb991852793dcff1abfded9bf904a75183c9dce1600db8065b9d09ca8cd837bfa1838e91cceb935bc547a2c944dc84a34159259819d0da6c82f5e45369e027f260779a0a06ab0806d276305e0fe516b63e69c733d4af8e84e9df54625e7a18f1b761f48ca906b007f7b7d352bc653b9477a40489fd7d3553aefb431fbea2a04d1c558a81bab91e316d337bad280be0777e7905033f3a2faf8") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/242) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:21 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x4000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x628}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8801}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000580)=""/5) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0xf, 0x20, 0x173, &(0x7f0000000000)="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"}) ioctl$PIO_UNISCRNMAP(r1, 0x4b3b, &(0x7f00000000c0)) 21:02:21 executing program 4: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="280a26bd7000fcdbdf250f00000008000b00", @ANYRES32=0x0, @ANYBLOB="08003b0001040000080039000800000005002a000000000008002c00040000000800320081000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_pts(r2, 0x0) r3 = syz_open_pts(r1, 0xa80) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x80, 0x0, 0x4, 0xfffffffa, 0x7, "a9efefab0051e5926b3fd70fc4a6b850e85cd8"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, 0xfffffffffffffffd) 21:02:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 21:02:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xec) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400008}, 0x1, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1431664e2ec7813dece0e45bc222cbd41f4b5980f5bf2c28d88afe485bb4029a9c26900036a3cefc2505a3f1857ab98699b8e306e91128c0b71eede42a9186dd1ea7075b52f60844571b86aef1af998ddfb00233a3519b56c32ee6da8b124c47336d8e658f177e2943400584bc65d1a1d58ce38a880fa1f53474d230e9f60cf05600"/139, @ANYRES16=r4, @ANYRES32=r0], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc3d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x20040091) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RFSYNC(r5, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0x9) 21:02:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x502, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000080) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, 0xfffffffffffffffd) 21:02:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x103180) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="961fddde771b54f1ee8c0cb4efbe06a5063f0b1422902d2e7a948a2f6884582c2b3bc3d0e3241b3e6e32e5bf1cfd55b194258936e16a8d70af50aef60f64ec3eea3990066adaf06fce23bdf96d9aa7d1fcd20276883ed3a3b5e4a4adfed6ea804c71dfc0ace9b39c7142d7cda55f582aa683150c88a2db29558726cb6af684358c8f33740eae51420fe0503cf4c696791eef60339fb12cc45d99db6cd5a96bd4b0f6da4c9c1babf2c71ca4b7cd6110a97a821f66247dd0f82c58466ed085765c541714537915ac112471e3db5e2706ee1515812637ca823b818383d90d6a") r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x308, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd5c9}]}, 0x34}}, 0x20004080) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/136) 21:02:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)="c2719335637b2110678286308acbd13a74468a5381eaf4a28662995bde3a301dfaca05e920aa579b90afb31ad6d01a8beaea414a69d1b2cf75d9ee5eddbd7839516f4fcc8a1a9600086165c882ca5894c01068bc15bccfb09ad5deb186bae6a0ef3c18a8436eb3e2808566") ioctl$KDSETLED(r0, 0x4b32, 0x8000000000) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, 0xfffffffffffffffd) 21:02:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="bc9017b058db77530108eb3788910e0b003d1fd33184fed4bcfd7af62395aded1bdbd20acbccb1440793def6c853867db6a2fffff60fa92c7b87e33e680379c8c0df91574252f12fdcc1fb49017d2f41b8cc66b74193ab9242042a89fdb4d090c604801635d77692117d85a94ae84e8b51a828500b2a8d4740e06a410fa46cea2a") sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10000044}, 0x4040880) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f00000000c0)) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0xdbe) 21:02:21 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000000)="c8c8275834f19b6758d0ed0000bfa93875fb4643e92fd4a1798ff33719ef23392a6299f6424cbbbba37282261ca8791e1a49ce028fb5ba65f0e6feadb52a01000000000000004ded39a0d96d88067d8c389bf76c99a755e27617e0c356f2149478cfb65696a9a3f9c852d0cde754c10e381e7306c06482f7593c29af96f55bade6f10e93435dae333bb88a44a8a1f46916018ce5653bf202e7c203c41dbf3d0424156d73") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000000c0)) 21:02:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/87) 21:02:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, 0xfffffffffffffffd) 21:02:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) 21:02:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:22 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$KDSETLED(r0, 0x4b32, 0x3) 21:02:22 executing program 1: pipe2$9p(&(0x7f0000000000), 0x84000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="d161ddf82a3e953c5aaaf93e2da6cc3d1eef8cf8335a250ac8572308f514e295e7ffed29a26ced4f33d9f864a0b88282aa11011024eb30759dfef31890a25a6ddbd2ca4a80d7d32c72249a0eb5bfa6d0ad3fce099bd9277fc7e17390bde019da4eea1fdaa7ad532a8bf878ace8") setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0)=0x2, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/86) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, 0xfffffffffffffffd) 21:02:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x2, 0x5, 0x0, 0x8, 0xd, "2c9b2590edba4c91b57027d1a12c293877a4b7"}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0xff, 0xfffffff9}) 21:02:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000040)="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"/291) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x551601, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_pts(r2, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x1b, 0x6, 0x1cc, &(0x7f0000000000)="7cb3cb2ec1e3e7328580c05bbb2edc4a64ef94a2a03a4d21daaf45920736d12a8dec0fe4b3106b04b4bc4234e5f546045741f5d6d90522124322565a8c2729843d7bbd37f7ccd7610a7a1d07c1c648a76c368495ac6c6eaacaf16a05fc22d2aecfb90790db5a6d6b92cbe018fa1d650aefa08cae7d9e8469422907857948a3ecdaae45268e4f449bd722f3e6fed90ceb2d97fc6d1c81df7dcfbac9d263ee4174e8ce99cca4ecb9fd165a0537875560e3ee4d04de795e6c631d76ad4f6047ef0c9b9c342961125ab077a150d51cd42cdefa8561248c859ef52e554659ce2efe0a0d3296723128580ae5a2725f732167ab3aaf78cf4fca6999e38fa8dbb2aab30a52f5e22a4b66fbf1d938181f04eca172fe5fc280580d15b4837a026837969ceb9e69b86e307db8b6acc5bc800bec54dec87d2094a0d890477fd27cfe1bbe4aaa421a6473a5e2d5b9e74b345e8950db9f3cdd39ef90d01c2f841f60795e2b952dc66e9572896c3948254bb93906aa81d1b8c89c05149c267bea0b1459c35f3cf4310cc37d41078ae9e6f9629dcde4410de83103b47dcfa5c25e0db6f9f382e6396362f0dbf51802d61a9045ddea6654d89da8b038347b65517e54ff1eeb9426338c1532a2b6bc628177529066716ec76756c811b2c610558ee2d5d71be329a869b876e41ecb6fccb0a575110645f761ce358887071d03826a1bbb5759703dd46b4e748ca680d1d66e649466054404c227a5f0b6f87690c47b4a1f165af123b29dc90eb5b499f367370b2294ad8a9458aff422e3bef39a585e64b5d7e563b929e3dbbee16de02481fc897c568f85b190bc43f21ea2640ef0bd3ac5988ec431075853080bfad37802a1af447b1ba73b75f91d5b1036acd78d14f76bddc16fd7d40fbec7ad50157fa0da372c40fa4f0a63933526e29c826419cd0b3d54eec5f7687e89a569fa815430b03d7b1577bf3c295370e7f89c4764c3ccc785964100bc152392a4388b93a1e6f81d5f6df93b519e15d418c4af403b26a4ab7ed809ae145aa1169bef9f010aac2db1d5bbd6f4f014d500b5e301a0abec9b6b6e4875f4876b499cce552bf4d70199c420f2deaed021c3b853530505ec34f3e412e4c64c33105dc4d91a170ad1403b1d9bf5332e1d01ac222a33423937e9958c517b63db899f65e18b9514e74ca43e00d6144a06cb656493548d303749bd658c3258093a39bbe3b2251d69085fffcaf553e59d7b66a405b716896407e82d851bb2adb3b143261363d6ca41b4658d3ad9b4ebe8adc4b69d8cdf5c4d28a6c71facb42a5bb899b4a6ad9a99887f571d0119409bdd3fa196a55bc395f9ca9d84b5d09df573a2556af0c10659820981ace81881be9cec828eceec2faa4c28b91dd10332b830587845d022979605b6ca240c9e0d1ca5edef2243d319506c6fa7cc0a3b67cfaf58da2a77"}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7f) syz_open_pts(0xffffffffffffffff, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f0000000440)="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") r3 = syz_open_pts(r0, 0x30000) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x5) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000780)={0xf, 0x1f, 0x1}, 0xf) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r2) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, 0xfffffffffffffffd) 21:02:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffb, 0xa0c00) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0xa408) sendto$unix(r2, &(0x7f0000000480)="72c001439e171d915b8232e57fb0c1914410fae29fe52dd9da851117ea915c1e1c6dd1fedc409b7ba2c4e4a989481b2ab02abf116275a67acd03d2eacc1e958415e9598015bd972aab52bed9b4ea3a82f168d32cc99de4faeba43645e8383d1e91ae086c7641fad18f", 0x69, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1f, 0x12, 0x12e, &(0x7f0000000040)="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"}) 21:02:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:22 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}}, 0x40010) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x7, 0x2, 0x143, &(0x7f0000000000)="64e7745df5946fc2749bc0a7ef01ee1126ef87872f84ee12a7005795ce463384d2822a9134dc9b76c21e4b2c225d7255fb771ffa2f365f095a7c176d43e508b6a9ce9eedf8749b842f9424963d09b6f6592b467a84d16381b0e4b6c4b0c42086fc5bb4e11b110bae8e999a7e6be6876572ad231dfe52db36504988bb0101b0dfd71957c8a712b474ee174712b6946c78830e2bdae8d4afa1b26c4000d8ec6fb78f4452b601a60434ec4a8bd470330c14c788c5f2caa49ec3bcf69f0bbb6f72453cfbd50e18166639bb63d3b4efe032fabf00ec96858a3b72a4ddc6ee73c3017c55b8ff6e7b9df385b11dd33679b753dfc4b031592245e7d51192e1221291cc66dbcab7a08013ab122129d64322e8370f1ba057325b0069372469ecaba52ebf2a09afa84c630c07dfa6d537d65a892f9bdb12d7070be0c5d5b551628fd95c9c604b7e875e30c2b182cbb2401678f300188e54e75efe948231f9d0dbff33436cf500795cbba1129e95ec8eef9e9df9477b72bed294496b68558a36413a9f38722362303d22e5c8c2c5713f3b22ec45159b81c71ac50064e6d3a2027d8bcd739f2b07df8743b184e5b608a6318ef86fafb28e68f69bf48f9b398470a6034d5b252a663610dbdfda8bb6565b732a89dda8b033fb738e601bb09d6b3f4f62180795090c0bc5418bd6efad52bbbea5f44cd222fe4e93ba9f52835e159b56a7654f4cc957020d9b5ea80fa29e75fb993b360797b4ec5190557eaa8348c8173cdacb82cc8815642001f8cd888c83d0a97395e1163b858b1edea8a03489cce41b56db884c254b5929a51034156b991d40f7503b2816a848d8b6313037097a1f6a8e2d9e640002b2ddf36e56f6cdba77ca00215492e488008c40902445954424bde4d17d1afe9c4f0771e5e12b73d5636498118d6d9b812b6d5844d21c4188ad7f07f4fbbf6920b5123a9be91667c699ba948369f8574e5a0b141405969bbf6ae25318f6ac0e434911adff3d2ad21fef11ead5c097d789540f2dbb10dbffde16752b3abc80c98bc31aa014909fb4b25106f7857f181737e6ad163a78a21992bc96926303616750059460a38670a8a070c6db716413521cf4d83ffc6ccb993d80b708ae7c439389fb6aa6bbb765e71c7c061d0dc542cd74abe9aa3c6b71655271436c751236cf3af306bbd22e51515c025ed2a9ba4dfd56a47b6e8ce545a84cbc30d1c3b616f3ce49c9eb61435161e0be4252c63cba0458350ddd5ca57b5fba651df9c04c5e428cd56398476fcb1bcd1b7e47136c592cd5a35be736ba977dd5653cc03472d9ec23e05b3009c79dce829f2673070d8914517fb4a6bccde2e643c6ccfd00786a71b40afc1db3a9f2248a5d08db9a94686be0d8927c1554c860145a8e4a5cf922c815ab39d8f081821b3b0102ba41d53e47e350c37e87e733a2323e1e7996b087"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b3b, &(0x7f00000000c0)) 21:02:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1000, 0x4040) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000440)={0x2, 0x1, 0x7, 0x2, 0x33, &(0x7f0000000040)="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"}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7f) ioctl$TIOCCBRK(r2, 0x5428) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x2}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, 0xfffffffffffffffd) 21:02:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/4096) 21:02:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7e8dca36) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/91) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x4004000) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x202000, 0x4) 21:02:22 executing program 1: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/128) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x80000001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000480)=""/21) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x10, 0xe, 0x45, &(0x7f0000000040)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, 0xfffffffffffffffd) 21:02:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000080)="1298c000000000000000ee5f882bdd2e9d39582e55ac0f63c2bce9b53f7a35ec4db64a9233bb747352eb1c9fca43c4b63af0ae84d5db2efa860d67bab0fd4229244c13e68ee2c21d2ae1bda3820c6716c8f8f1e33bb2a11caf1ea6aa106b6b420adb1a548e0c677bc18d67d7b3f7f94aa8d9ddf77e3e4583656068bdb4215a") syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x6, 0x81, 0xc, @mcast1, @mcast1, 0x7, 0x20, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x29, 0x2, 0x5, 0x7ff, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x10, 0x8, 0x0, 0x8}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) 21:02:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f0000000440), 0x3f, 0x8002) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000480)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000005c0)=""/174) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000540)={0x2, 0x2, 0x7, 0x1e, 0x19, &(0x7f0000000000)="ec55ed9f1d97f0e53009e059a79908e0868b1a8cf3ed9bf9a52aae09c8e3edd7389cc48b764ef686c1705e19e02aba95c14f64243695e879fe46866ef10f10b7ebc7268b5c3ddbff902ee7d3fa64b2a4059700dc5eef9c72b5f0dff998941ac69bd6f6a37fd409180717e78e455d98ad32611c6d1c81dd1596472108dd2ce7cf1cab3af245c60c585d12275300245f876979f33e04054b4040f1d1427bceeff0a160a18ff19b3857e52526b3d38ca94749b6d9c2f7f7307a2b61871f98df69cfd2bff7c6c380b01ba5b35047c3dc61a94c2f2a3c3271e3406fe6d67a6c80244ae5686f8f3a497954c0c7815f275e45d986c7b99a486274eafc958a556131928a49e268a47ad367676a093709e03fa458a73da7f49bc1f21a462d7498b9c0916972bb2eaab60951dd8eab4d20d3eab01f0b5c4a635c35aad29b4dd2995e810b6417d3c0271328a1c5f625effe6b574c46f5490c9806dacc92a1a3971cc43332166a7b0acd5e6af3c7fd9ac5e681e539ff39b54393504eca9dc205b9109faad1c7825f944ce660c84cb42e0c481b761867c9bb7e8fa9d61566afad4b063185e700e1df7cb4f14e3dabade14f7520d4020b77e4545ee1fc66ee4efc1247d91a3538f62061e333f4b071a61a16fdd7ddaf9851f079ca3016a2a84bf05b4425e1676c9111010c9e11c606bae33bef2fb4d101ee689be5dc0a4a21ef8583649628b55e2b1b01652df724503e9d44f91c441d91ec516ae6d6e15546ad1719333df8a76bd7dcc4914ec85352cbcded766b77d1f88e26829b7dd21837612bf7ba2e407d6404e9395fba9c6b4dae7371e223326496a40c3b87efb6ac293ae57de86c084b399be2e82a30f6bffc9c82fc3eb6cc14b9a18408fdbbf96498f2aca38dc96fbc729cfe41bae147d58c0d211f9a3b593f9316e783cbe2cedac6923b9cfe572c2e032ff046dbcc84d5a5959681466be329ed97e2bcdaa38dc1f39c8ddbe80a3b9b9ee26d87d332eb156d05368a58a471c8689a138d7d65110946b9c723f329bfadcc448be3bf913d6e00ba72435b698569d0e685500611ea5107f88c26b6bd1ea5736190f78d8015612f47163856f03f6fff1505def95c5d7150b2c6bdddd88613f051e4172e6687fdfbf9fd5fdd0f9fa2f49b0119f6023209c238a14859f68fc1b761fdb5bce4f626d8fee28b1f18741a042cbe8482c22f8668e338c9d313b5bdad780cb1b55b561d163371ee5d281161f37642d784eb22110629111bb6ff47358674d02ebe070cd7f2443fcd7778798ec8cfe6619df08c1971d9e0bb7e1b46be5766d60e97f38494d0eb82390856a373234c3c884db5991777492cb3457a9dfa9368a1b01a449654bf8d61735ccd433bd5532501d822fd88d773be472a0275384bc72f5f74de2d5dbe74c6103e6a42277787c21a8c95a7a31eae067874e050864a"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000400)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000004c0)=""/70) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000580)=""/14) 21:02:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f0000000000)="d4cf7f97588d7aec5784fdfb256762d004ab9b2ce0c380a95cb575ea5b338792a7f689dd69d36944b652629b7afcad9bbfc33999b74b285c868743690b14ee90") r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 21:02:22 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe7ac}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b3b, &(0x7f00000000c0)) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, 0xfffffffffffffffd) 21:02:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x6, 0x4, 0x16, 0x16, "5227aacf845902d8dfd29b771812d3b7341a39ae2c2703b539f96fe1ecdb0ea0f5eb7095006cdd5130e48d950b853e798fade172ee1f02801c12010c35460e4a", "bc1ddc20e2d44c61b5da8a47ca072edac860aff2c0ee50bf0151b766e0b8470a", [0xfff]}) 21:02:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, 0xfffffffffffffffd) 21:02:22 executing program 1: ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000000)="1696c0316e028f15dc9d4d395df22491273971d4b961f0a63548375af56c92ecee9a9c5d49152e0ee2ceff7a18c3dcc661236597b2a3f5181e35f2d2c84c6eaafad6a4") 21:02:22 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100a938ed05f25aa237faff0600000000001000807ad8bed3fb31b6811e0b9f", @ANYRES16=r0, @ANYBLOB="02002cbd7000ffdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f7ffffff0600110082fb0000080001007063690011000200303030303a30303a31302e300000000008000b000200000006001100ff7f0000080001007063690011000200303030303a30303a31302e300000000008000b00a80600000600110009000000080001007063690011000200303030303a30303a31302e300000000008000b000800000006001100ff7f0000080001007063690011000200303030303a30303a31302e300000000008000b00770200000600110006000000080001007063690011000200303030303a30303a31302e300000000008000b00ffff000006001100060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000060011000bf20000"], 0x150}, 0x1, 0x0, 0x0, 0x24008840}, 0x4040000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0xa3c6e5fe99dd16f0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) ioctl$PIO_UNISCRNMAP(r1, 0x4b44, &(0x7f00000002c0)="0cef8a1d13c14006beace38e0f82f7d4971db6634f142970c783ed04000000da2af9c08f593fd6f03280efa9010000000000000074ce7c298431441b7a6fdfd7c71d75e5") 21:02:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 21:02:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x8000, 0xc0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, 0xfffffffffffffffd) 21:02:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x20000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r2, 0x4b31, &(0x7f0000000000)="2a7bc5250599db2d86d9931983d8d6fe34ebf229f05519739a1cc4b9eedc517b86914ffc3d6bba04cb5578ff39b2dabe3ff92eb9fbc52c14c266e510c735a335f205b04e20631e03bd9adde2b4d2bec2cb0438b62d8e5edd829dc8f524d0342b9e6e07000000bd68fb218be02d351d86c745a12891c372a0cfb47607") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x80, 0x0, 0x17f, 0x1f, 0xe, "788e2e92d054d50046fa2344f2cb5a7d7641d0"}) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x5, 0x323000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000100)={0x1, 0x9, 0x1, 0x800, 0xc, "dd7f4161a47e509da261361de6063462973561"}) 21:02:22 executing program 4: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b48, 0xfffffffffffffffd) socketpair(0x27, 0x800, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000640)={0x2, 0x1, 0x8, 0x1d, 0xa0, &(0x7f0000000240)="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"}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x80) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xff, 0x4, 0x10044, 0x3, 0xa, "0fe946fbb9f8889d7cfb167f00"}) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, 0xfffffffffffffffd) 21:02:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000000)) 21:02:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x80) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0xdb7, 0x4, 0x0, 0xf}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x2a002) ioctl$PIO_UNISCRNMAP(r2, 0x4b3b, &(0x7f0000000000)="4b5201fe280100"/17) 21:02:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x50d, 0xfff, 0xe5, 0xed3, 0xd, "4480ef59ab00ff860e601daabc780faf008a19"}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x9, 0x4, 0x10, @local, @empty, 0x8, 0xff00, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x2f, 0x1, 0xc0, 0x81, 0x50, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x3f000, 0x92f0}}) 21:02:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, 0xfffffffffffffffd) 21:02:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0x8) 21:02:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 21:02:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)="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") r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x17, 0x1d, 0x45, &(0x7f0000000240)="682cd94877077d5c86310a55d57ed90b178e49a920492be2ae8332696bd70febd0973c490527fc61b3d689e13f171bb8f308314fcbb0bdf35ae38e5e6be1726beda8aa67150df8fc4941c40b99d63ec0ba88fd9390d26d2d0731deffcffddea86e810f4432567b25902a5a2c07469112b66f4bec080ab3b6e53c3b85588d6491559e388b4e1f2468a6d1d3aa46914b7d86d8be11a83a69aff6d8a622ed1f7379a9cd523eb73eca45b36de0f5710227d3fc3a495dbef4ad27c6cb5072dd43c2e236748dec9162ba560bbc9a862f2fce71114615c2f344a0d65c26daacd178896793102246f30e29dbd68c56fe0faae2d8e2d44af5ecb4142901d04a98432883b536a259ddd9814c2aa508445bd4c2b7e8e5f15c8d04c2b656364f789ebead1208d4814e7e085b0c9e9ffc041b2cc3b0c85515067af24c42f5cf6e64e9979499270e55a8b5ab11554e9c8f91b0836789e0ea24c3a4ce2ccf45763f6d1c64f86c835b6e13d4ef0c699f2c232c93b6197a0044df9725e0949317beed87c66ec5c1b4cdf824dcb8788704ba57451c4fbe73bf0d18dafbde016fec5a6fd625d33007bbd05eb6da14a84877d85bce9bc0e42ab3116dc96e9ac592f4c04c9905a76038371476812b8a0c184fda3ad6e2e38aae2f009e41478c4341dc6c13001cbbff504953983858048927c10441577ad2c4e70adf3e040904f46c9256c19ac30e3a0b86ba4e88cb0970dc00a1cedf87750f1100c43592caa9b128ea514b9fc8154d25546aeeaaf7ae6dc55bf91ece6d58d09dd459f5228439dee9c06309c29cc2b9a85c8b04b397c8191a4d5f231e3550148abf71f42b2dded31e91bb4ea1ed50eed4f20cc36d3bac4b8955768094429b3d038411a417341d1bee18225e8d976bc6044b9780289d4dddf547ee48cec6de8a7eb4bcff48f08c766ce1e848b6b1fec22a6167b780f009d7fdb92d1e7a70fb11f1c244cef146ad82d64fa8b65b9d999f8c993520b2fcc515eb231f1a79a04b3972eea660628a363ec3fe8c15c02e70481c03cd392a8f66b0ace7ae40bd46ae077dd72112a9e1926d381d99ab63449a463e90d8327cbc47cf3a1fff36b70cc5350e08c003ab46bfb698a3cbf140bccb37f148755122232d640833a7ecd1cff8e4bf369b80b19e3c4f442181d3caa0e5e13730e57b3c169263babf4db908d246a4928b30d6f99f4cdd421b1da9bc625ed4cac161cbd204ae2afec39900aa75b008d7bae4695171fd62a2c0a4ef1f53f0ae46d806602320902ab98e15277aba5a1b8e5a609dfb1be98fd2c5b55331665b77b18c0a64b4f401e2c408707af83a1888a214862b5b4e1dd81c74f99b3bdf6868954c3158a2e15316210273d54a11b7139fd179cd469290582da910a6e0e7660ced40e7cb3c1b03bd437d56d2320fede407291ca8340991d69c075784659077b5c34e"}) 21:02:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, 0xfffffffffffffffd) 21:02:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$TIOCCBRK(r0, 0x5428) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/171) ioctl$KDSETLED(r1, 0x4b32, 0x2) r2 = syz_open_pts(r1, 0x80003) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x0, 0x2, 0x80000001, 0x1, 0x9, "d14e98e8094d9c4e9e268c12b21bae41177c32"}) 21:02:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:02:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x6, 0xbe3c}) 21:02:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCBRK(r1, 0x5428) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f00000000c0)) 21:02:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r1, 0x5409, 0x101) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, 0xfffffffffffffffd) 21:02:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/161) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) 21:02:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b3b, &(0x7f0000000000)="9a222821d37c5a91906db214c79b17448c5d19cff1dca796419c4543395967f6f050870b827cc551254b673d1119ebe7cb3a5cee60ca0089ce05f1") 21:02:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 21:02:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000040)="da5f738d06e42036254b6f8ebe0cc44a66596cf029f10a9ff879c8944883624135dc12822b9dee0ec0df1eadbd000000000000002f000000972169ae22117a8a34f2b0000000") 21:02:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x0, 0x2, 0x7}}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x90000) write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x8, 0x1000, 0x7}}, 0x14) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x101000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000005c0)={0x3, 0x9}) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFSYNC(r5, &(0x7f0000000580)={0x7, 0x33, 0x2}, 0x7) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000540)={0x2, 0x1, 0x17, 0x1f, 0xaa, &(0x7f0000000140)="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"}) 21:02:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x4b31, 0x6, 0x401, 0x28e, 0x3, "1d97d7c43c730377195e1435c33404dc31e8d4"}) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000200)={0x6, 0x3}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b31, &(0x7f0000000140)="422f4461006cb5d7bb5f3652a26a936f869f1bf1df6dbf72e4c1aa3f30bbc8916f9e2cc50c8330d217456ee09c993ee08f90ca26d2f561a26878081c271e9a405f2a8ec7d406e0c3b55e2e70b09f662c6dfee214e5388798dfec1383e1cc657516d593879dd0446c637d342b1146005f1456efb505eeb7954c204f2578b56b235f81aaf4c61de8e3") ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x8, 0x0, 0x1000, 0x20, 0xc, "fef51081e87d170d522a4cd9b8a1031029dde4"}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="345264456ed80ad194dbcb9b0f5301606c4718bd46780e44742c539f4a4b76b5c9ba2154b7b75c1a526860915bc4aa7e", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2503000000080001000300000008000100010000000800010003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x810) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000000) ioctl$KDSETLED(r1, 0x4b32, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="15000000", @ANYRES16=0x0, @ANYBLOB="01002b4306621d4d710eb701000008003b0008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4048000) 21:02:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, 0xfffffffffffffffd) 21:02:24 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, 0xfffffffffffffffd) 21:02:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_pts(r0, 0x8200) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) mq_getsetattr(r3, &(0x7f0000000040)={0xd6, 0x7, 0x2266}, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x40085) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) [ 2502.582788][T30745] FAULT_INJECTION: forcing a failure. [ 2502.582788][T30745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2502.596754][T30745] CPU: 1 PID: 30745 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 21:02:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, 0xfffffffffffffffd) 21:02:24 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2502.596787][T30745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.596797][T30745] Call Trace: [ 2502.596806][T30745] dump_stack_lvl+0xb7/0x103 [ 2502.596854][T30745] dump_stack+0x11/0x1a [ 2502.596871][T30745] should_fail+0x23c/0x250 [ 2502.596923][T30745] should_fail_usercopy+0x16/0x20 [ 2502.596947][T30745] _copy_from_user+0x1c/0xd0 [ 2502.596968][T30745] set_selection_user+0x30/0x80 21:02:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, 0xfffffffffffffffd) 21:02:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, 0xfffffffffffffffd) [ 2502.596995][T30745] tioclinux+0xbf/0x450 [ 2502.597014][T30745] vt_ioctl+0x26e/0x2060 [ 2502.597103][T30745] ? terminate_walk+0x263/0x280 [ 2502.597168][T30745] ? path_openat+0x18e4/0x1f20 [ 2502.597191][T30745] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2502.597213][T30745] ? do_filp_open+0x18a/0x200 [ 2502.597233][T30745] ? fsnotify_perm+0x59/0x2e0 [ 2502.597254][T30745] ? __fsnotify_parent+0x32f/0x430 [ 2502.597271][T30745] ? tty_jobctrl_ioctl+0x100/0x900 [ 2502.597421][T30745] tty_ioctl+0xa24/0x1120 [ 2502.597438][T30745] ? selinux_file_ioctl+0x8e0/0x970 [ 2502.597465][T30745] ? do_vfs_ioctl+0x7c2/0x1410 [ 2502.597487][T30745] ? vfs_create_mount+0x3c/0x270 [ 2502.597508][T30745] ? tty_get_icount+0x70/0x70 [ 2502.597526][T30745] __se_sys_ioctl+0xcb/0x140 [ 2502.597546][T30745] __x64_sys_ioctl+0x3f/0x50 [ 2502.597564][T30745] do_syscall_64+0x3d/0x90 [ 2502.597591][T30745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2502.597674][T30745] RIP: 0033:0x4665d9 [ 2502.597690][T30745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.597762][T30745] RSP: 002b:00007f35bb712188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2502.597794][T30745] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2502.597810][T30745] RDX: 0000000020000080 RSI: 000000000000541c RDI: 0000000000000003 [ 2502.597825][T30745] RBP: 00007f35bb7121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2502.597839][T30745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2502.597853][T30745] R13: 00007ffc70916bcf R14: 00007f35bb712300 R15: 0000000000022000 [ 2502.857892][T30760] FAULT_INJECTION: forcing a failure. [ 2502.857892][T30760] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.857910][T30760] CPU: 1 PID: 30760 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 2502.857968][T30760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.857975][T30760] Call Trace: [ 2502.858014][T30760] dump_stack_lvl+0xb7/0x103 [ 2502.858029][T30760] dump_stack+0x11/0x1a [ 2502.858038][T30760] should_fail+0x23c/0x250 [ 2502.858053][T30760] ? set_selection_kernel+0xdf7/0x1260 [ 2502.858069][T30760] __should_failslab+0x81/0x90 [ 2502.858079][T30760] should_failslab+0x5/0x20 [ 2502.858090][T30760] __kmalloc+0x66/0x340 [ 2502.858159][T30760] ? is_console_locked+0x11/0x20 [ 2502.858248][T30760] ? complement_pos+0x334/0x540 [ 2502.858258][T30760] set_selection_kernel+0xdf7/0x1260 [ 2502.858272][T30760] set_selection_user+0x5e/0x80 [ 2502.858286][T30760] tioclinux+0xbf/0x450 [ 2502.858296][T30760] vt_ioctl+0x26e/0x2060 [ 2502.858313][T30760] ? terminate_walk+0x263/0x280 [ 2502.858337][T30760] ? path_openat+0x18e4/0x1f20 [ 2502.858349][T30760] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2502.858360][T30760] ? do_filp_open+0x18a/0x200 [ 2502.858388][T30760] ? fsnotify_perm+0x59/0x2e0 [ 2502.858399][T30760] ? __fsnotify_parent+0x32f/0x430 [ 2502.858409][T30760] ? tty_jobctrl_ioctl+0x100/0x900 [ 2502.858421][T30760] tty_ioctl+0xa24/0x1120 [ 2502.858510][T30760] ? selinux_file_ioctl+0x8e0/0x970 [ 2502.858611][T30760] ? do_vfs_ioctl+0x7c2/0x1410 [ 2502.858627][T30760] ? vfs_create_mount+0x3c/0x270 [ 2502.858647][T30760] ? tty_get_icount+0x70/0x70 [ 2502.858664][T30760] __se_sys_ioctl+0xcb/0x140 [ 2502.858680][T30760] __x64_sys_ioctl+0x3f/0x50 [ 2502.858698][T30760] do_syscall_64+0x3d/0x90 [ 2502.858721][T30760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2502.858813][T30760] RIP: 0033:0x4665d9 [ 2502.858854][T30760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.858873][T30760] RSP: 002b:00007f35bb712188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2502.858891][T30760] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2502.858903][T30760] RDX: 0000000020000080 RSI: 000000000000541c RDI: 0000000000000003 [ 2502.858919][T30760] RBP: 00007f35bb7121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2502.858931][T30760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2502.858943][T30760] R13: 00007ffc70916bcf R14: 00007f35bb712300 R15: 0000000000022000 [ 2502.858985][T30760] selection: kmalloc() failed 21:02:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) 21:02:25 executing program 2: syz_open_pts(0xffffffffffffffff, 0x9603) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b44, &(0x7f0000000040)="57653d03c5c757f2b792921da0e2cc3e96dfde806024959ae4") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) 21:02:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x4, 0x11, "015292cacebb64a7240ad1082b67d9d6535122"}) 21:02:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x800, 0x200200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x5, 0x40}) 21:02:25 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:25 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xff, 0x400000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0xfcb4, 0x5, 0x1, 0x17, "6a5c8952cfbfa4acc743b684b64d09abdbf544"}) 21:02:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2503.486621][T30783] FAULT_INJECTION: forcing a failure. [ 2503.486621][T30783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.499706][T30783] CPU: 1 PID: 30783 Comm: syz-executor.1 Not tainted 5.13.0-syzkaller #0 [ 2503.508218][T30783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.508231][T30783] Call Trace: [ 2503.508240][T30783] dump_stack_lvl+0xb7/0x103 21:02:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_pts(r1, 0xc00) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x97f) r5 = syz_open_dev$sg(&(0x7f0000001000), 0xbe, 0x4801) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000000)="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") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001040), 0x800, 0x0) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000001080)=0x1) 21:02:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b31, &(0x7f0000000540)="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") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = syz_open_pts(r0, 0x48081) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x80, 0x1b, 0xa06, 0x5, 0x2, "7f1e155f0a868cab2188f6daf500"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x20, 0x9, 0x7725, 0x6, 0x4}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6f0d, 0x5, 0x8, 0xf000, 0x3}}) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000080)=""/39) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) [ 2503.508264][T30783] dump_stack+0x11/0x1a [ 2503.508280][T30783] should_fail+0x23c/0x250 [ 2503.508305][T30783] should_fail_usercopy+0x16/0x20 [ 2503.508406][T30783] _copy_to_user+0x1c/0x90 [ 2503.508424][T30783] simple_read_from_buffer+0xab/0x120 [ 2503.508454][T30783] proc_fail_nth_read+0xf6/0x140 [ 2503.508482][T30783] ? rw_verify_area+0x136/0x250 [ 2503.508502][T30783] ? proc_fault_inject_write+0x200/0x200 [ 2503.508577][T30783] vfs_read+0x154/0x5d0 [ 2503.508594][T30783] ? selinux_file_ioctl+0x8e0/0x970 [ 2503.508614][T30783] ? __fget_light+0x21b/0x260 [ 2503.508630][T30783] ? __cond_resched+0x11/0x40 [ 2503.508652][T30783] ksys_read+0xce/0x180 [ 2503.508711][T30783] __x64_sys_read+0x3e/0x50 [ 2503.508730][T30783] do_syscall_64+0x3d/0x90 [ 2503.508747][T30783] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2503.508766][T30783] RIP: 0033:0x41935c [ 2503.508781][T30783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2503.508798][T30783] RSP: 002b:00007f35bb712170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2503.508818][T30783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 2503.508830][T30783] RDX: 000000000000000f RSI: 00007f35bb7121e0 RDI: 0000000000000004 21:02:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x4, 0x6, "c7cfc88b9f40322ffe7567085da6e4043853d3"}) [ 2503.508920][T30783] RBP: 00007f35bb7121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.508932][T30783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2503.508946][T30783] R13: 00007ffc70916bcf R14: 00007f35bb712300 R15: 0000000000022000 21:02:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) 21:02:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:26 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b48, 0xfffffffffffffffd) 21:02:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x5, 0x4, 0x1, 0x7, 0x16, "f872377d2919630c634ea0e8eeeb3d9096744e"}) 21:02:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x4000081) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x5, 0x5}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x101000) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x7, 0x81, 0x2, 0x7fff, 0x2}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x583001, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00008000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b001f000000080001007063690011000200303030303a30303a31302e300000000008000b0000fe0100080001007063690001000200303030303a30303a31302e300000000008000b00090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b004446c5590e0001006e657464657673696d0000000f0002006e6570339d6e58011e202f700f276b7464657673696d30000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b001c985308080001007063690011000200303030303a300000000008000b0006000000080001007063690011000200303030303a30303a31302e300000000008020b00010000000e0001006e657464657673696d0000000f0002006e657464657673a8dec37d0a41b0125a299c6c4e89efc5a4dd7a16b7644e6f1c5c56636843e4ecbe641ebb6dc2c5d491c7bcbe431a280786ff7e4f4fcb8081df5056ad40388f05ad1cbfa1787aeaad7f78569600b8fd1033c649daf0bfc8ca085f6ea5a2a379488b3cd935449ccac7a9533dd425f36f75156d4333455007a29e48b45bdc3069726d848e6597162a9d157a6f02bdb0ca4b03ad2db2530742b29d2a6a6ffc7e74926cb36bde81a1000000000000"], 0x194}, 0x1, 0x0, 0x0, 0x20004084}, 0x840) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:26 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2504.387736][T30831] FAULT_INJECTION: forcing a failure. [ 2504.387736][T30831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2504.400832][T30831] CPU: 0 PID: 30831 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2504.400848][T30831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:02:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2504.400854][T30831] Call Trace: [ 2504.400859][T30831] dump_stack_lvl+0xb7/0x103 [ 2504.400874][T30831] dump_stack+0x11/0x1a [ 2504.400883][T30831] should_fail+0x23c/0x250 [ 2504.400898][T30831] should_fail_usercopy+0x16/0x20 [ 2504.400928][T30831] _copy_from_user+0x1c/0xd0 [ 2504.400940][T30831] set_selection_user+0x30/0x80 [ 2504.400955][T30831] tioclinux+0xbf/0x450 [ 2504.400967][T30831] vt_ioctl+0x26e/0x2060 [ 2504.400980][T30831] ? terminate_walk+0x263/0x280 [ 2504.401147][T30831] ? path_openat+0x18e4/0x1f20 21:02:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2504.401158][T30831] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 2504.401172][T30831] ? avc_has_extended_perms+0x5d8/0x7b0 [ 2504.401183][T30831] ? do_filp_open+0x18a/0x200 [ 2504.401194][T30831] ? fsnotify_perm+0x59/0x2e0 [ 2504.401269][T30831] ? __fsnotify_parent+0x32f/0x430 [ 2504.401349][T30831] ? tty_jobctrl_ioctl+0x100/0x900 [ 2504.401445][T30831] tty_ioctl+0xa24/0x1120 [ 2504.401509][T30831] ? selinux_file_ioctl+0x8e0/0x970 [ 2504.401531][T30831] ? do_vfs_ioctl+0x7c2/0x1410 21:02:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2504.401548][T30831] ? vfs_create_mount+0x3c/0x270 [ 2504.401567][T30831] ? tty_get_icount+0x70/0x70 [ 2504.401583][T30831] __se_sys_ioctl+0xcb/0x140 [ 2504.401655][T30831] __x64_sys_ioctl+0x3f/0x50 [ 2504.401672][T30831] do_syscall_64+0x3d/0x90 [ 2504.401712][T30831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2504.401818][T30831] RIP: 0033:0x4665d9 [ 2504.401831][T30831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.401847][T30831] RSP: 002b:00007f5e11dcc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2504.401867][T30831] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2504.401881][T30831] RDX: 0000000020000080 RSI: 000000000000541c RDI: 0000000000000003 [ 2504.401895][T30831] RBP: 00007f5e11dcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2504.401907][T30831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2504.401920][T30831] R13: 00007ffe5796228f R14: 00007f5e11dcc300 R15: 0000000000022000 [ 2504.637477][T30842] FAULT_INJECTION: forcing a failure. [ 2504.637477][T30842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2504.637501][T30842] CPU: 0 PID: 30842 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2504.637523][T30842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.637535][T30842] Call Trace: [ 2504.637543][T30842] dump_stack_lvl+0xb7/0x103 [ 2504.637570][T30842] dump_stack+0x11/0x1a [ 2504.637586][T30842] should_fail+0x23c/0x250 [ 2504.637734][T30842] should_fail_usercopy+0x16/0x20 [ 2504.637758][T30842] _copy_to_user+0x1c/0x90 [ 2504.637776][T30842] simple_read_from_buffer+0xab/0x120 [ 2504.637793][T30842] proc_fail_nth_read+0xf6/0x140 [ 2504.637898][T30842] ? rw_verify_area+0x136/0x250 [ 2504.637989][T30842] ? proc_fault_inject_write+0x200/0x200 [ 2504.638011][T30842] vfs_read+0x154/0x5d0 [ 2504.638029][T30842] ? selinux_file_ioctl+0x8e0/0x970 [ 2504.638051][T30842] ? __fget_light+0x21b/0x260 [ 2504.638078][T30842] ? __cond_resched+0x11/0x40 [ 2504.638144][T30842] ksys_read+0xce/0x180 [ 2504.638163][T30842] __x64_sys_read+0x3e/0x50 [ 2504.638184][T30842] do_syscall_64+0x3d/0x90 [ 2504.638202][T30842] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2504.638224][T30842] RIP: 0033:0x41935c [ 2504.638237][T30842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2504.638255][T30842] RSP: 002b:00007f5e11dcc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2504.638275][T30842] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 2504.638305][T30842] RDX: 000000000000000f RSI: 00007f5e11dcc1e0 RDI: 0000000000000004 [ 2504.638318][T30842] RBP: 00007f5e11dcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2504.638330][T30842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2504.638342][T30842] R13: 00007ffe5796228f R14: 00007f5e11dcc300 R15: 0000000000022000 21:02:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffff051) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x292f, 0x9, 0x100, 0xfffffff7, 0x16, "3218a62cfc53ad0418893d17889cf73ef8b252"}) 21:02:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x0) 21:02:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:27 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x5, 0x1, 0x5, 0x3, 0x2, "d664b18d69e3ead112f7544173797f890a2978"}) 21:02:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:27 executing program 4: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b48, 0xfffffffffffffffd) 21:02:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$TIOCCBRK(r0, 0x5428) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 21:02:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x4, 0x8000, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x6, 0x254}}) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x404201) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x200000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 21:02:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCCBRK(r0, 0x5428) 21:02:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r1 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 21:02:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x10) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)) 21:02:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:28 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) syz_open_pts(r0, 0x400084) 21:02:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/4096) syz_open_dev$tty1(0xc, 0x4, 0x3) 21:02:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x10, 0x4, 0x5}}, 0x14) ioctl$KDSETLED(r1, 0x4b32, 0x8000020000203) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x501) write$P9_RRENAMEAT(r2, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x13, 0x1, {0x2, 0x4, 0x7}}, 0x14) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/14) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/103) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:28 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x28800, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x7c, 0x3, @buffer={0x0, 0x1000, &(0x7f0000000e00)=""/4096}, &(0x7f00000000c0)="99e3c37c62ed28bf2ce2027a88e729b87b007658dc2d449da03a96ace01a5703ed9e2863c5551198de740f83b7693eba4e28079a60680b86c3ff3b1266106c6f02ee792e0beedb1c3e16e349195506e6e907585bb3534858c8942caa955db0ae36b3cfd7178913aa538e3fae18afdf7dc0b4e027959eefc66e02564a", &(0x7f0000000140)=""/139, 0x6, 0x10002, 0x1, &(0x7f0000000200)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4b48, 0xfffffffffffffffd) 21:02:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xb1183d113d252f52}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8c1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048890}, 0x881) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b4a, 0xfffffffffffffffd) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:02:29 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="8b41960eea0233ddcd5a627d4cb5e79a4fc2df33381ffcbd30f104b42d3e69d67784caf4c8d9b88970a43f98cccf6161ca3e0700000000000000635b967c265614ffc3b1729f831a6974f1043490408eef50c2ea10f7de19a0e64b0a04c2daae0bc3f0e93d10a9721e675c06f3e5c678ae89003bc178087bc297c96e59ab8352eb339b011403ddc8309f9daf78770d4b0b257954ef6b1d0e57e2a45300008480a9e7731850fd081f9f513126add5b8c66a8d00"/188) ioctl$TIOCCBRK(r0, 0x5428) socketpair(0xf, 0x1, 0x800, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000280)=0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES16=r6, @ANYBLOB="000426bd7100fedbdf2402000000b5ef82d3eb5c443956cbf28cbec94caeaf4f518c847df8fe0bf52aed1ce835ac133f4c98fbf1c362a109aa1b33fe0f6734fc4be3a2309629074964e01f7aa479ffc5b0ec903fb9d45b7dbd4d47e28506d65bb909610b609666bafa61ff7ab71a0ce0"], 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r8, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fbdbdf250600ff03000000000000400008000600", @ANYRES32=r8, @ANYBLOB="050030000100000006002800010000000500290000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c840) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/35) 21:02:29 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x400c085) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250800000008003a000400000008003c0006000000050130000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f00000001c0)={0x8, 0xffffff00}) 21:02:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x5, 0x20}) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b48, 0xfffffffffffffffd) 21:02:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x10100) syz_open_dev$vcsn(&(0x7f0000000100), 0x401, 0x82401) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5d, 0x2, 0xfff, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x20, 0x10005, 0xfffffffa}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) 21:02:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x40) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="23a6e3c9afa780ae05e6ba6c88d6621fce37df08e7f76a886ab457de9fb842b4d29dc2ef03c9d715ddac6f66e42d0c7b9a10d70ea9cd3b9ff1e33b419641c5f5497474d6f5470d8004e91a2e8c67f5fc23e44446d422") 21:02:29 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x103, 0x29, 0x1, {0xfff, [{{0x80, 0x0, 0x7}, 0x100000001, 0x20, 0x7, './file0'}, {{0x10, 0x3, 0x7}, 0x5, 0x81, 0x7, './file0'}, {{0x20, 0x3, 0x8}, 0x1, 0x8, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x0, 0x2, 0x7, './file0'}, {{0x1, 0x1, 0x7}, 0x20000000000, 0x6, 0x7, './file0'}, {{0x80, 0x4}, 0x8001, 0x7, 0x7, './file0'}, {{0x4, 0x4, 0x4}, 0x0, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x5}, 0x81, 0x1f, 0x7, './file0'}]}}, 0x103) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000480)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x2, 0xff, 0x8, 0x4}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x1, 0x14, 0x1f, 0x18c, &(0x7f0000000040)="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"}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 21:02:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/163) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x80, 0x1, 0x2, 0x8, @mcast1, @mcast2, 0x7800, 0x700, 0x9, 0x7f}}) r3 = syz_open_pts(r0, 0x10000) ioctl$KDSETLED(r3, 0x4b32, 0x4) 21:02:30 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x4502c0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000000)="d2c6b5e7d60c32b072e622c5911a61fe50e70a30bb26c2e1281b060b51396a4c8504531d380f71d1a68cbdacf6860156dedf0db01150aa636c989e4f195a4d4c16ab425797631a") syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x434, 0x28000000, 0x5, 0x8, 0xe, "6a5389d603fca8a3670f7056311d2483c71a72"}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0xb5a9, 0x505000) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x17, 0x1f, 0x4d, &(0x7f0000000040)="22c5da193d52e75f88dc9d90c2f30733d43003535676f8ca05d31e0433e69e7da21af9f307d4d86cf3c6fc65d854af0cbb8a30fb31f0d79cee9a4c5dccc06495adc3a33a6b8cea107239e09de957a80fe2d5ef8bb736cccc63ed31a8ffa7ebd1ebc190a82b217edaab693181020ff540bc52d7c1b6f560400366224464f9c71c90bb02841da4613cb9c9dff18c8a78663840950157c842bfca2931b250e2b0e77770dd9050bd43c1d4e6e03aea01d2d9066b30a7a7c57bea7e29db12c344820e212846407396ae0d4e894e0689335253970efececb53e6e6475f3c7a4cce7ed3936b4770ba55827fb125104299086ae285f2b0c338b5e16ed86c2de38bd9036ed91b92dc6263531fe1b1b931cfd9593d0396244d3b451b2f641400303bc0f5e2dfdf5e275521478fffc26c2eb1749b8d0075065538402aa35e8085c6b18704fe5e470fadf42ffcccc7dcb7349278d3a3e145be95fece2df3bb8d6ddead518ba55bc5782022e03e1630440cab4d79a7b181d752d062007dfc98f9b1140708e651fac6b4e2224d5b1a3b65669cfc7e05a81cb7391a0e80610baf0f850b34020a1e50b81937d9154a03376ad868202361b54ef27d33abe7579465ea0e05b6412479bdd01bd82855cb61a4ebb2b175e213baed29103eabfc0163652c2807483d06f0158712c8a6e0319255ae436a86c7698faaa11415ab5a4665baf2bb52088f52de575ce8f7d1b9b9cb8806f895d888fde7b31fefb4cb35e9ec1ba7880b4b62b1d8a1142bf19a03287a81e3b2dcbbf9a68d0b68c834415e4b535721b0099b69527471ce79856609612fb29e234da6e0b2ac80bf03347b24cf85c18b608e234f80f668bc5ffce7e52db6d0581e2fd1b4855fd65e19ce971aab44e94f493f91ebf64acc7acb5aa43a6c70c2955e8968b615a1dc2bc1e5d2faea4ab587c2325d6014b36bc0f1a5a6f891d34590ac6f62dd12ecf43f44d06ea5e2aef06813d8100cf54d76df9ba9552ac203fe966c1115ac81e1cc9491d2cd8896cec8c72f16aa3cffa375f0ae2ee20d38ba2d441db491c0a43e30ab886990e99ffcbb8660934d37afe0ff883165d3ef1b1b4c9a2ca653db68594a88048fbd4ca438f46418bbd95b961e10f960634b7943377569ad113e9eb648e79fe2f64581e96fd9be5dfeab39cc3af852d9838ac4defc7867644a12054cd7672192b23b4777399be081af27aa4f8cc7129b6698ce44b1377abd30677c8c848c8d099b42021592cad18859f0c797653f34856ef0deaaaa06567dfbb42d79f7bfd2d0049acedecbf1475b10116db573e9ebd9b614cfc7b1266cbc55aa3104f6f92a55ef73d4ec4d61b26f5ac0ed836db26c6066b1acbb13f2fd136051b8be7725c9affda9d2265afcafab7319fbfd7ca78077b41f29a3d1332e642c95b0e51b5aaf0bbcaf4418e8c9b24f52b79bdff4"}) socket$inet6_udp(0xa, 0x2, 0x0) msgrcv(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00c54e40d5000000ecd66694ef81b7afedfdd37cbcdd4c2a8381065ba0e2e77855262965602ce588ae4924a6158d9eed15844721370c5f4cdca8639e70f64f458eccd0f96789d7771350b51d29e4c614c877db0d6885ded02a98ee34b96dd96421b230c988d4343b1be3a4345019646bf512004094755a37249103acb6c7669c82bb00000100000000002d98b87fa49e6a7d96757dae44539654a2ce0869c7cd090000000000000006a1ea360dfcfe9169149502f1c4193532ec2054db"], 0x8, 0x3, 0x3000) r1 = syz_open_pts(r0, 0x100100) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000940)={0x2, 0x1, 0x8012, 0x14, 0x1c8, &(0x7f0000000540)="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"}) 21:02:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xba6, 0x3, 0x0, 0x4}}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x111880, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x1f, 0x11, 0x66, &(0x7f0000000040)="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"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x20100) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000004c0)) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x4b4a, 0xfffffffffffffffd) 21:02:30 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:30 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x20, 0x0, 0x8}}, 0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fcdbdf2503000000050038000000000008000600", @ANYRES32=0x0, @ANYBLOB="0800390003000000080004000005002f00001c2000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fff, 0x210182) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xf32c}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xc551, 0x3ff, 0x736, 0x1a539710, 0x8, "13757949d4c9884a728931d0279cb832936f4d"}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:31 executing program 2: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x4, 0xb8fb00, 0x7, 0xfffffe01, 0x1b, "03195c5178e6179b88446b8c0276276878cdfb"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCCBRK(r0, 0x5428) 21:02:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:31 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x37115) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="3354c052b2b693727672fc5900000000000000008866dae3f3879944049ab93277ae3c2a17d9e3241a38d724101a2bc643a39f2eeb2603a4ddf2e2bb7cda7a3363111f52914d92b5a3f5799bc93a706fdad98ee654938c68c74de57e") 21:02:31 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x15, 0x4, 0xe0, &(0x7f0000000040)="f9fb9e40f89254c013516040e39ea53a37a028a738dc5a7fa5ce3f25f20293ef8507142fbc441137d95b9b244c09b588281d0d5117f4594656667269e1a069c76ffde5c8d46917e62ccbca0b2c44bf90ff98912a1a3ef904f699b64e814ae498cc46b6f9a2605c501fef93d6f3dbc17adc69ebb575af2edf71e03516863818d7217c93cf555080274adf9b639b4ed3f2e02815c665b3c6044e40d6492023e76d6b6790ed3cc6178d5fa8caac434df82fcf543af20dfa26e26a39bee62f4a401854cbe57a7ca8612f1ae3ce3030b1e8173685534ddd8d3f3ceb65da3d6acce78624b447a851444106e7490781a193e4a47430ad75face08dc4ac58645eca01f6f208e36531ed1826e462deb6a47dd83cd6a8f65ec47c9fb223724da79b66c96b12caa01b0e745233b99a48dcd88ba2dac78db9a20bedc449cd2f5cada233d81e8f58fa456dcef48b4492d06ab9bd952f8f72180d4ee976b281c0a2b00a1b127da2c60b7c5d5e0c28c32c671e410c715924ab1aa391991e78aa04683e8690213cc68f52d37f1c59db746c0091e44e192e4e21e965c9e9e9d1665bd6af65763d368e57215e83d80018d72df7b15bdd5a4c9bcba402118f31abfd3ca4f7779ff2026def5cbd490eb06a9ed35e0d4a7139e1d79d7ebb229bcc2768bbb83672685a2c38369be0654d0b4ba81bc58e978f63c97c14eb31867cb50ee2cdfef91eb07501c109e690019ce72cfbab223a29d48c5a48dc1fac0e0c6e6246cb7884c88077a6a1140d8c4ef571daa1d9e86a222fc8b7388c494f5fdf3ea54289af01472f701a044e0d688cfb7391ac76fcf93d2af72535f2ae9a89411e1b0b3e50098edb5224cf39562796643587f7a7c4a0e9e47ec5e7a5507efa23060685a71eb64e7a3b69a9a5ee1667d2ac9c0e63c6acff11e8b3ce97547452c4a0cf41db829ebbfada901e2c7e76bc5b585cae12fc8973b17f3d300769c2f263684f826292efd5fa16e701072b4e28175433aae67a043533b7afc90caab4183bfcb7789224c660cc0ebc0990da74102aae40d56271f1eb5f97882eb993023b91ad503fb5806780c5f64a8fe513cf0df7f58af96f78b33dfe3361f704a9076fb3fb1dc09799952ecde60196f733b776842f500073be7b8fe711fb0f0648eb6512f94080ff8dbf06f0a82af28d06ce5393ffad19e2f1b91a7579c76d1f255d157d89383e04eb4bc33f21f93e1967d0779177f28de9f4f477571838ddb5981a943626690a354f6017a35f818097c05ef35c56bf90ce73f741f15502e76357fa042c1c79cb6b0168e0d720780cb8dcc233474fe55212464c4c511a6a023639bd50230dea1d40c306a4863f12034b73c7210e9c2b6be980d3ec47534b822baacce7469ffe481314f09456607e2f2be029c0620771138934191489ea4cddf306945e09fc049cac11d768289625e"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000480)="6dc34eb02921623f7355e4fa3e2c7ae66e0533ff0a15153c1e216202e99f12e94d41668bfbdaf15b2665342bb981bc8aa20d3da034a21afe6ae28705e915c468e154e6aba144fedce9d4b1892d26b08ec10699f773ac143bf36fa0c9a84e3603f15204f896ac54db575db8603becdf66ecd84ff0db94aeb41d7101600c842f29f718fd06a880dc9d7202e21f1a9393fcfbb16c20b6950e4dbe4f577bdc8f0b8643e93d7fc5") ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 21:02:31 executing program 4: msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x6, 0x7ff}) 21:02:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x40, 0x0, 0x2}}, 0xffffff5b) 21:02:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:31 executing program 2: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000000)={0xae, 0x40, 0xfffffffa, 0x7, 0x1b, "b6fc5999b65108ed80c12dd0938c7d1d70b51c"}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/18) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="7693ab4f2456d5322e78a516a57138474236fad95360fadff3fec2be70114c1d294e4ca53dd67f6b546f5fe13fe197abda51e4036054eb6d950c314aacac13bec664c674") ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f0000000000)="5839032ee7121595ca617f003ff1a08695598d75c6") 21:02:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x4, 0x7, 0x1, @empty, @remote, 0x1, 0x1, 0x2f6}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0xffffffa5, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 21:02:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x124, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='#\x89\x00', r1) keyctl$get_persistent(0x16, 0xee00, r1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCCBRK(r0, 0x5428) 21:02:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x0, 0x0, 0x2}}, 0xffffff5b) 21:02:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa0a02) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1000, 0x0, 0x0, 0x12}) 21:02:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:32 executing program 3: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x87, 0x29, 0x2, {0x2, [{{0x1, 0x0, 0x6}, 0x7, 0x1, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x4, 0x5, 0x7, './file0'}, {{0x2, 0x0, 0x7}, 0x0, 0x7, 0x7, './file0'}, {{0x1fb0830cd32bc62b, 0x3, 0x1}, 0x9, 0x8, 0x7, './file0'}]}}, 0x87) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) 21:02:32 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x10000) ioctl$TIOCL_SETSEL(r1, 0x4b48, 0xfffffffffffffffd) 21:02:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x187002) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b44, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x2) 21:02:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x7fffffff, 0x6, 0x6, 0x383b93ab, 0x18, "295cc046522d4b81f8e3292a322125e44b5cb3"}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) 21:02:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x1f, 0x2, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x20, 0x80, 0x6, 0x2}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x2f, 0x7, 0x5, 0x2, 0x80, @mcast1, @mcast1, 0xe1, 0x7800, 0x5, 0x8}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r5, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'ip_vti0\x00', r5, 0x8000, 0x10, 0x68c9, 0x1, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x67, 0x0, 0xc0, 0x4, 0x0, @multicast1, @local, {[@end, @end, @end, @noop]}}}}}) 21:02:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x6, 0x0, 0x200, 0x8000, 0x2, "7c217eb57bd78c07200732d719c17cff1cc648"}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 21:02:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) syz_open_pts(r0, 0x212481) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) r2 = syz_open_pts(r0, 0x200401) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x1f, 0x3, 0xf492, 0xce}}) 21:02:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 4: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0xc080, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/140, 0x8c, 0xfffffffffffffff8, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/141) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/52) 21:02:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_pts(r0, 0x202400) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x3, 0xa6, 0x45, 0x87, 0x6, "826dafaefd4bb228cb47f7d8723f41dcca19c4"}) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2, 0x2}, &(0x7f0000000280)='#\x89\x00', 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) 21:02:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/163) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x80, 0x1, 0x2, 0x8, @mcast1, @mcast2, 0x7800, 0x700, 0x9, 0x7f}}) r3 = syz_open_pts(r0, 0x10000) ioctl$KDSETLED(r3, 0x4b32, 0x4) 21:02:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/163) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x80, 0x1, 0x2, 0x8, @mcast1, @mcast2, 0x7800, 0x700, 0x9, 0x7f}}) r3 = syz_open_pts(r0, 0x10000) ioctl$KDSETLED(r3, 0x4b32, 0x4) 21:02:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 3: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x149000) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x401, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x259e5905}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004041}, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x9, 0x7}) 21:02:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000480)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x2, 0xff, 0x8, 0x4}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x1, 0x14, 0x1f, 0x18c, &(0x7f0000000040)="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"}) ioctl$TIOCL_SETSEL(r0, 0x4b48, 0xfffffffffffffffd) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 21:02:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 3: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/163) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x80, 0x1, 0x2, 0x8, @mcast1, @mcast2, 0x7800, 0x700, 0x9, 0x7f}}) r3 = syz_open_pts(r0, 0x10000) ioctl$KDSETLED(r3, 0x4b32, 0x4) 21:02:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) 21:02:34 executing program 3: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xa2e9) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xd8, 0x3ff, 0x3, 0x80, 0xf, "90f7d918a0ea5c08406ceffad66fdab0e07847"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0x5, 0x9a, 0x1000, 0x13, "39a97392e18474cc10fa1cef8b95b14234a7eb"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/73) 21:02:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/163) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x80, 0x1, 0x2, 0x8, @mcast1, @mcast2, 0x7800, 0x700, 0x9, 0x7f}}) syz_open_pts(r0, 0x10000) 21:02:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="a64f850c641fbe024ec89c0a1cb237d8ed6edcd13c9503866521c43837a2423734f7ab7c3f71ab2b7bad13d946c56c33198fe3ade013e8b8c0111dcfb4fbf704167c8fc609248a2ef4587cb48a6bbf481a5c494ce6147b6a8066ca08cbb6ba972c2921a166094b2674c959b4ef5257680663581deccf4bf04e847457ae196af13c215a72e0dae500c0b6c72abba0e47195c3e1b08104999a13887065c3e58bc9526b8158ce5aae55ca49598936fd692220443c3465ba76dd4632b94bb5579cc5052c06267cf9b1ac93ff13318b87da58fe6795c5a7ac96eec47c53e8b5c1e59694e8f58c986784c430efa7528017cb52e365c12ad51f05fa72b7999052ba74d2cac6a101643bd20e2c2639786e5c0785111a49024e4ddae2107f6cdaf92294b9ed21ae96c45da66d23365e56a54942accbc9e5abbfc04a290f084349976cac72886e7945f3cb03b0817b71898a48c138730bdec3e7e57f61ccc52fc36f5302ae9fad08cfbaacc0a4cf5f4e953bac32975ab1f975b33d546dd14dae78c5df46b92aef5ba9b8394f4283f945fdc30abb8198b9c71816ec8cd8f2ef24c72b55d4d331d688fad4600cedd764527e35fe4773eaebdc230bb59fe49e5a1ad235c54a150847e5b7fb83508c2faa663ea6d7882d261f1e6c712e8446a7a29d22f5a91506e38b44de703c2e8f379301a3bbefda86a313128c34776fba4c57201d56b9d83122af09b2fefde8ab5ea7f2b55d11724cc3b92ff3596f9b5c1366112c7b19a4c12f82b16e9d2d64f49bea9ba50fed7d51b176c631c73da933f094de542b390e2daf8c78712d5d3a6d2e9595ed05e1f16b8afefb57290d77fd9e51f0f30fd4ae6787f91742e2a6e8ce2969d04c76a72cef1d7b7f4565bd3225c5949886377de4668f062e39e65e69d01ae526f53e31135f490e9c3cbda1f20f54a0c9f9f9ba0fd1fd2780d13da11a80316ea4ae32ea9eee307a226f0f50cb8c54a16d1e35f095739c0b8c422d56db14aef80f0a258d2e50786164d18747749e10a302155810c8c54e8191ff47572e44fc6ecc58c2d91aabcac43cc5e309d64118a7f8c58947b92cf1246be0e7e2cc3a03a5e1571bc0dbf8755fe36e6c75da2fde17f3a80cfad67779cadfaced0a1b2e5c27989db45672a229c448581b331c2870efd35067f583113aa6035e984c02d92397e75f6cf68cf19371b74d903257ad25c826e7a879b4bb322c005f92fb1ba324d7c95e4f1659bf82d0fc658fbd88f94d9643c96f0b611910cc1244a30b2b555b24eb3dcf7929af2f74b1eefa318878d85e2ebe61eba49ccdc2538f08c151748bc62a5341baf283dcdcea68b6bd03e7466132130234993e9b394adc1bcff49aeca236a8cb6788f0259681407f82c4ad615c70d4ea6b46583fd40a1d0bd689f79755a1c5201391617e169aa8ebd32f21342035f8ae97ad4c"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/163) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x2f, 0x80, 0x1, 0x2, 0x8, @mcast1, @mcast2, 0x7800, 0x700, 0x9, 0x7f}}) 21:02:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x8100) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x7065, 0x1ff}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x10001, 0x4, 0x40, 0x4, 0x7, "c260b148ffc0eb50000000000000000000560d"}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 21:02:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b33, &(0x7f00000000c0)) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x40, 0x0, 0x2}}, 0xffffff5b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x268200, 0x0) 21:02:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000005c0)=""/163) ioctl$TCSBRK(r0, 0x5409, 0x7) 21:02:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:35 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100), 0x6, 0x18100) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000140)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4c000) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000005c0)=""/163) 21:02:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:36 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:36 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, 0xfffffffffffffffd, 0x40040) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x0) 21:02:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) [ 2514.277392][T31473] FAULT_INJECTION: forcing a failure. [ 2514.277392][T31473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.290674][T31473] CPU: 0 PID: 31473 Comm: syz-executor.4 Not tainted 5.13.0-syzkaller #0 [ 2514.299228][T31473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.309322][T31473] Call Trace: [ 2514.312603][T31473] dump_stack_lvl+0xb7/0x103 [ 2514.317199][T31473] dump_stack+0x11/0x1a [ 2514.321349][T31473] should_fail+0x23c/0x250 21:02:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:36 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2514.325771][T31473] should_fail_usercopy+0x16/0x20 [ 2514.330799][T31473] _copy_to_user+0x1c/0x90 [ 2514.335257][T31473] simple_read_from_buffer+0xab/0x120 [ 2514.340634][T31473] proc_fail_nth_read+0xf6/0x140 [ 2514.345692][T31473] ? rw_verify_area+0x136/0x250 [ 2514.350546][T31473] ? proc_fault_inject_write+0x200/0x200 [ 2514.356256][T31473] vfs_read+0x154/0x5d0 [ 2514.360409][T31473] ? __fget_light+0x21b/0x260 [ 2514.364372][T31484] FAULT_INJECTION: forcing a failure. [ 2514.364372][T31484] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.365305][T31473] ? __cond_resched+0x11/0x40 [ 2514.365345][T31473] ksys_read+0xce/0x180 [ 2514.386718][T31473] __x64_sys_read+0x3e/0x50 [ 2514.391242][T31473] do_syscall_64+0x3d/0x90 [ 2514.395651][T31473] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.401601][T31473] RIP: 0033:0x41935c [ 2514.405482][T31473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2514.425214][T31473] RSP: 002b:00007f3bf69a4170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2514.433623][T31473] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 2514.441602][T31473] RDX: 000000000000000f RSI: 00007f3bf69a41e0 RDI: 0000000000000004 [ 2514.449566][T31473] RBP: 00007f3bf69a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.457526][T31473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.465582][T31473] R13: 00007ffcf892a42f R14: 00007f3bf69a4300 R15: 0000000000022000 21:02:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:36 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) [ 2514.473558][T31484] CPU: 1 PID: 31484 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2514.482033][T31484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.482046][T31484] Call Trace: [ 2514.482053][T31484] dump_stack_lvl+0xb7/0x103 [ 2514.482145][T31484] dump_stack+0x11/0x1a [ 2514.482159][T31484] should_fail+0x23c/0x250 [ 2514.482201][T31484] ? file_tty_write+0x204/0x660 [ 2514.482225][T31484] __should_failslab+0x81/0x90 [ 2514.482243][T31484] should_failslab+0x5/0x20 [ 2514.482260][T31484] __kmalloc+0x66/0x340 [ 2514.482292][T31484] file_tty_write+0x204/0x660 [ 2514.482313][T31484] ? security_file_permission+0x87/0xa0 [ 2514.482336][T31484] ? n_tty_read+0x10c0/0x10c0 [ 2514.482371][T31484] tty_write+0x24/0x30 [ 2514.482432][T31484] vfs_write+0x69d/0x770 [ 2514.482452][T31484] ksys_write+0xce/0x180 21:02:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2514.482470][T31484] __x64_sys_write+0x3e/0x50 [ 2514.482501][T31484] do_syscall_64+0x3d/0x90 [ 2514.482518][T31484] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.482540][T31484] RIP: 0033:0x4665d9 [ 2514.482555][T31484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.482572][T31484] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2514.482591][T31484] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2514.482602][T31484] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 [ 2514.482613][T31484] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.482625][T31484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.482636][T31484] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 [ 2514.546811][T31492] FAULT_INJECTION: forcing a failure. [ 2514.546811][T31492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.676541][T31492] CPU: 1 PID: 31492 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2514.676630][T31492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.676637][T31492] Call Trace: [ 2514.676642][T31492] dump_stack_lvl+0xb7/0x103 [ 2514.676657][T31492] dump_stack+0x11/0x1a [ 2514.676666][T31492] should_fail+0x23c/0x250 [ 2514.676681][T31492] should_fail_usercopy+0x16/0x20 [ 2514.676753][T31492] _copy_from_iter+0x131/0x970 [ 2514.676767][T31492] ? check_stack_object+0x61/0x70 [ 2514.676847][T31492] ? __virt_addr_valid+0x15a/0x1a0 [ 2514.676859][T31492] ? __check_object_size+0x253/0x310 [ 2514.676872][T31492] file_tty_write+0x3d1/0x660 [ 2514.676936][T31492] ? n_tty_read+0x10c0/0x10c0 [ 2514.676955][T31492] tty_write+0x24/0x30 [ 2514.676979][T31492] vfs_write+0x69d/0x770 [ 2514.677002][T31492] ksys_write+0xce/0x180 [ 2514.677020][T31492] __x64_sys_write+0x3e/0x50 [ 2514.677041][T31492] do_syscall_64+0x3d/0x90 [ 2514.677060][T31492] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.677105][T31492] RIP: 0033:0x4665d9 [ 2514.677114][T31492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2514.677125][T31492] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2514.677136][T31492] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2514.677144][T31492] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 21:02:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x19, 0x19, 0x130, &(0x7f0000000000)="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"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 21:02:36 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x2) 21:02:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2514.677151][T31492] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.677158][T31492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.677165][T31492] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x3) 21:02:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2514.955909][T31519] FAULT_INJECTION: forcing a failure. [ 2514.955909][T31519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.969086][T31519] CPU: 1 PID: 31519 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2514.977677][T31519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.987766][T31519] Call Trace: [ 2514.987778][T31519] dump_stack_lvl+0xb7/0x103 21:02:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x8000) [ 2514.987802][T31519] dump_stack+0x11/0x1a [ 2514.987819][T31519] should_fail+0x23c/0x250 [ 2514.987843][T31519] should_fail_usercopy+0x16/0x20 21:02:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x7) [ 2514.987865][T31519] _copy_from_iter+0x131/0x970 [ 2514.987945][T31519] ? check_stack_object+0x61/0x70 [ 2514.987976][T31519] ? __virt_addr_valid+0x15a/0x1a0 [ 2514.987998][T31519] ? __check_object_size+0x253/0x310 [ 2514.988023][T31519] file_tty_write+0x3d1/0x660 [ 2514.988048][T31519] ? n_tty_read+0x10c0/0x10c0 [ 2514.988136][T31519] tty_write+0x24/0x30 [ 2514.988157][T31519] vfs_write+0x69d/0x770 [ 2514.988176][T31519] ksys_write+0xce/0x180 [ 2514.988197][T31519] __x64_sys_write+0x3e/0x50 [ 2514.988218][T31519] do_syscall_64+0x3d/0x90 [ 2514.988239][T31519] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2514.988285][T31519] RIP: 0033:0x4665d9 [ 2514.988300][T31519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:02:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="a64f850c641fbe024ec89c0a1cb237d8ed6edcd13c9503866521c43837a2423734f7ab7c3f71ab2b7bad13d946c56c33198fe3ade013e8b8c0111dcfb4fbf704167c8fc609248a2ef4587cb48a6bbf481a5c494ce6147b6a8066ca08cbb6ba972c2921a166094b2674c959b4ef5257680663581deccf4bf04e847457ae196af13c215a72e0dae500c0b6c72abba0e47195c3e1b08104999a13887065c3e58bc9526b8158ce5aae55ca49598936fd692220443c3465ba76dd4632b94bb5579cc5052c06267cf9b1ac93ff13318b87da58fe6795c5a7ac96eec47c53e8b5c1e59694e8f58c986784c430efa7528017cb52e365c12ad51f05fa72b7999052ba74d2cac6a101643bd20e2c2639786e5c0785111a49024e4ddae2107f6cdaf92294b9ed21ae96c45da66d23365e56a54942accbc9e5abbfc04a290f084349976cac72886e7945f3cb03b0817b71898a48c138730bdec3e7e57f61ccc52fc36f5302ae9fad08cfbaacc0a4cf5f4e953bac32975ab1f975b33d546dd14dae78c5df46b92aef5ba9b8394f4283f945fdc30abb8198b9c71816ec8cd8f2ef24c72b55d4d331d688fad4600cedd764527e35fe4773eaebdc230bb59fe49e5a1ad235c54a150847e5b7fb83508c2faa663ea6d7882d261f1e6c712e8446a7a29d22f5a91506e38b44de703c2e8f379301a3bbefda86a313128c34776fba4c57201d56b9d83122af09b2fefde8ab5ea7f2b55d11724cc3b92ff3596f9b5c1366112c7b19a4c12f82b16e9d2d64f49bea9ba50fed7d51b176c631c73da933f094de542b390e2daf8c78712d5d3a6d2e9595ed05e1f16b8afefb57290d77fd9e51f0f30fd4ae6787f91742e2a6e8ce2969d04c76a72cef1d7b7f4565bd3225c5949886377de4668f062e39e65e69d01ae526f53e31135f490e9c3cbda1f20f54a0c9f9f9ba0fd1fd2780d13da11a80316ea4ae32ea9eee307a226f0f50cb8c54a16d1e35f095739c0b8c422d56db14aef80f0a258d2e50786164d18747749e10a302155810c8c54e8191ff47572e44fc6ecc58c2d91aabcac43cc5e309d64118a7f8c58947b92cf1246be0e7e2cc3a03a5e1571bc0dbf8755fe36e6c75da2fde17f3a80cfad67779cadfaced0a1b2e5c27989db45672a229c448581b331c2870efd35067f583113aa6035e984c02d92397e75f6cf68cf19371b74d903257ad25c826e7a879b4bb322c005f92fb1ba324d7c95e4f1659bf82d0fc658fbd88f94d9643c96f0b611910cc1244a30b2b555b24eb3dcf7929af2f74b1eefa318878d85e2ebe61eba49ccdc2538f08c151748bc62a5341baf283dcdcea68b6bd03e7466132130234993e9b394adc1bcff49aeca236a8cb6788f0259681407f82c4ad615c70d4ea6b46583fd40a1d0bd689f79755a1c5201391617e169aa8ebd32f21342035f8ae97ad4c"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:37 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x8) 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x9, 0x6, 0x6, 0x4, 0xd, "f58c51dba1bd9f621ec605e49300"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/238) [ 2514.988320][T31519] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2514.988341][T31519] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2514.988354][T31519] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 [ 2514.988368][T31519] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.988399][T31519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.988413][T31519] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x300) 21:02:37 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x1e, 0x1a, 0x171, &(0x7f0000000000)="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"}) 21:02:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2515.301100][T31560] FAULT_INJECTION: forcing a failure. [ 2515.301100][T31560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2515.314182][T31560] CPU: 1 PID: 31560 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2515.322620][T31560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:02:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x700) 21:02:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) [ 2515.322633][T31560] Call Trace: [ 2515.322640][T31560] dump_stack_lvl+0xb7/0x103 [ 2515.322732][T31560] dump_stack+0x11/0x1a [ 2515.322748][T31560] should_fail+0x23c/0x250 21:02:37 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xeffd) [ 2515.322770][T31560] should_fail_usercopy+0x16/0x20 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x9) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) mq_getsetattr(r3, &(0x7f0000000040)={0xed03, 0x6, 0x1000, 0x9}, &(0x7f0000000080)) [ 2515.322846][T31560] _copy_from_iter+0x131/0x970 [ 2515.322870][T31560] ? check_stack_object+0x61/0x70 [ 2515.322895][T31560] ? __virt_addr_valid+0x15a/0x1a0 [ 2515.322914][T31560] ? __check_object_size+0x253/0x310 [ 2515.322953][T31560] file_tty_write+0x3d1/0x660 [ 2515.322992][T31560] ? n_tty_read+0x10c0/0x10c0 [ 2515.323024][T31560] tty_write+0x24/0x30 [ 2515.323075][T31560] vfs_write+0x69d/0x770 [ 2515.323096][T31560] ksys_write+0xce/0x180 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2515.323115][T31560] __x64_sys_write+0x3e/0x50 [ 2515.323161][T31560] do_syscall_64+0x3d/0x90 [ 2515.323179][T31560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2515.323224][T31560] RIP: 0033:0x4665d9 [ 2515.323239][T31560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.323256][T31560] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2515.323276][T31560] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2515.323290][T31560] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 [ 2515.323303][T31560] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2515.323316][T31560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2515.323330][T31560] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/189) 21:02:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") [ 2515.611449][T31586] FAULT_INJECTION: forcing a failure. [ 2515.611449][T31586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2515.624657][T31586] CPU: 0 PID: 31586 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2515.633183][T31586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.643254][T31586] Call Trace: [ 2515.643266][T31586] dump_stack_lvl+0xb7/0x103 [ 2515.643292][T31586] dump_stack+0x11/0x1a 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xfdef) [ 2515.643310][T31586] should_fail+0x23c/0x250 [ 2515.643337][T31586] should_fail_usercopy+0x16/0x20 [ 2515.643362][T31586] _copy_from_iter+0x131/0x970 [ 2515.643422][T31586] ? check_stack_object+0x61/0x70 [ 2515.643446][T31586] ? __virt_addr_valid+0x15a/0x1a0 [ 2515.643468][T31586] ? __check_object_size+0x253/0x310 21:02:37 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x80000) [ 2515.643492][T31586] file_tty_write+0x3d1/0x660 [ 2515.643552][T31586] ? n_tty_read+0x10c0/0x10c0 [ 2515.643569][T31586] tty_write+0x24/0x30 [ 2515.643590][T31586] vfs_write+0x69d/0x770 [ 2515.643618][T31586] ksys_write+0xce/0x180 [ 2515.643638][T31586] __x64_sys_write+0x3e/0x50 [ 2515.643658][T31586] do_syscall_64+0x3d/0x90 [ 2515.643713][T31586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2515.643801][T31586] RIP: 0033:0x4665d9 [ 2515.643816][T31586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.643835][T31586] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2515.643855][T31586] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2515.643868][T31586] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 [ 2515.643880][T31586] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 21:02:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") [ 2515.643920][T31586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2515.643932][T31586] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 [ 2515.845208][T31613] FAULT_INJECTION: forcing a failure. [ 2515.845208][T31613] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2515.858326][T31613] CPU: 0 PID: 31613 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2515.866748][T31613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.866765][T31613] Call Trace: [ 2515.866772][T31613] dump_stack_lvl+0xb7/0x103 [ 2515.866796][T31613] dump_stack+0x11/0x1a [ 2515.866812][T31613] should_fail+0x23c/0x250 [ 2515.866859][T31613] should_fail_usercopy+0x16/0x20 [ 2515.866884][T31613] _copy_from_iter+0x131/0x970 [ 2515.866910][T31613] ? check_stack_object+0x61/0x70 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2515.866936][T31613] ? __virt_addr_valid+0x15a/0x1a0 [ 2515.866959][T31613] ? __check_object_size+0x253/0x310 [ 2515.866985][T31613] file_tty_write+0x3d1/0x660 [ 2515.867091][T31613] ? n_tty_read+0x10c0/0x10c0 [ 2515.867110][T31613] tty_write+0x24/0x30 [ 2515.867157][T31613] vfs_write+0x69d/0x770 [ 2515.867176][T31613] ksys_write+0xce/0x180 [ 2515.867224][T31613] __x64_sys_write+0x3e/0x50 [ 2515.867244][T31613] do_syscall_64+0x3d/0x90 [ 2515.867266][T31613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2515.867291][T31613] RIP: 0033:0x4665d9 [ 2515.867305][T31613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2515.867323][T31613] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2515.867361][T31613] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2515.867377][T31613] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 [ 2515.867393][T31613] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 21:02:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/118) 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xf0ff7f) 21:02:37 executing program 3 (fault-call:1 fault-nth:6): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) [ 2515.867412][T31613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.020155][T31613] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.074757][T31646] FAULT_INJECTION: forcing a failure. [ 2516.074757][T31646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.087827][T31646] CPU: 1 PID: 31646 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2516.096271][T31646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.106505][T31646] Call Trace: [ 2516.109785][T31646] dump_stack_lvl+0xb7/0x103 [ 2516.114379][T31646] dump_stack+0x11/0x1a 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x1000000) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.118547][T31646] should_fail+0x23c/0x250 [ 2516.118575][T31646] should_fail_usercopy+0x16/0x20 [ 2516.118679][T31646] _copy_from_iter+0x131/0x970 [ 2516.118841][T31646] ? check_stack_object+0x61/0x70 [ 2516.118868][T31646] ? __virt_addr_valid+0x15a/0x1a0 [ 2516.118908][T31646] ? __check_object_size+0x253/0x310 [ 2516.118935][T31646] file_tty_write+0x3d1/0x660 [ 2516.118962][T31646] ? n_tty_read+0x10c0/0x10c0 [ 2516.118979][T31646] tty_write+0x24/0x30 [ 2516.118999][T31646] vfs_write+0x69d/0x770 [ 2516.119018][T31646] ksys_write+0xce/0x180 [ 2516.119088][T31646] __x64_sys_write+0x3e/0x50 [ 2516.119221][T31646] do_syscall_64+0x3d/0x90 [ 2516.119242][T31646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2516.119264][T31646] RIP: 0033:0x4665d9 [ 2516.119277][T31646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:02:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$TCSBRK(r0, 0x5409, 0x8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x2000000) 21:02:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 3 (fault-call:1 fault-nth:7): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") [ 2516.119340][T31646] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2516.119402][T31646] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2516.119415][T31646] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 [ 2516.119428][T31646] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.119442][T31646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.119455][T31646] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x3000000) [ 2516.384819][T31685] FAULT_INJECTION: forcing a failure. [ 2516.384819][T31685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.397920][T31685] CPU: 0 PID: 31685 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2516.406381][T31685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.416439][T31685] Call Trace: 21:02:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000340)=""/101) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000300)) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="64e4d900", @ANYRES32, @ANYBLOB="20002dc37000fbdbdf251200000008820b0004000000000000000100000005003700010000ee04002a00000000000500370001000000050033000200000008003a0081000000080034000700000005002900000000000500300010000000", @ANYRESDEC, @ANYRES16=r1, @ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x240080c0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) write$P9_RWRITE(r5, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x101}, 0xb) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.416449][T31685] dump_stack_lvl+0xb7/0x103 [ 2516.416474][T31685] dump_stack+0x11/0x1a [ 2516.416531][T31685] should_fail+0x23c/0x250 [ 2516.416556][T31685] should_fail_usercopy+0x16/0x20 21:02:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x7000000) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.416578][T31685] _copy_from_iter+0x131/0x970 [ 2516.416600][T31685] ? check_stack_object+0x61/0x70 [ 2516.416629][T31685] ? __virt_addr_valid+0x15a/0x1a0 [ 2516.416648][T31685] ? __check_object_size+0x253/0x310 [ 2516.416672][T31685] file_tty_write+0x3d1/0x660 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x7ffff000) 21:02:38 executing program 3 (fault-call:1 fault-nth:8): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) [ 2516.416696][T31685] ? n_tty_read+0x10c0/0x10c0 [ 2516.416714][T31685] tty_write+0x24/0x30 [ 2516.416740][T31685] vfs_write+0x69d/0x770 [ 2516.416759][T31685] ksys_write+0xce/0x180 [ 2516.416778][T31685] __x64_sys_write+0x3e/0x50 [ 2516.416800][T31685] do_syscall_64+0x3d/0x90 [ 2516.416820][T31685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2516.416842][T31685] RIP: 0033:0x4665d9 [ 2516.416856][T31685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.416923][T31685] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2516.416942][T31685] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2516.416954][T31685] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 21:02:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.416967][T31685] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.417066][T31685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.417078][T31685] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 [ 2516.675359][T31721] FAULT_INJECTION: forcing a failure. [ 2516.675359][T31721] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xeffdffff) [ 2516.688424][T31721] CPU: 0 PID: 31721 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2516.696858][T31721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.706916][T31721] Call Trace: [ 2516.706926][T31721] dump_stack_lvl+0xb7/0x103 [ 2516.706950][T31721] dump_stack+0x11/0x1a [ 2516.706989][T31721] should_fail+0x23c/0x250 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.707014][T31721] should_fail_usercopy+0x16/0x20 [ 2516.707039][T31721] _copy_from_iter+0x131/0x970 [ 2516.707064][T31721] ? check_stack_object+0x61/0x70 [ 2516.707158][T31721] ? __virt_addr_valid+0x15a/0x1a0 [ 2516.707181][T31721] ? __check_object_size+0x253/0x310 [ 2516.707208][T31721] file_tty_write+0x3d1/0x660 [ 2516.707235][T31721] ? n_tty_read+0x10c0/0x10c0 [ 2516.707269][T31721] tty_write+0x24/0x30 [ 2516.707289][T31721] vfs_write+0x69d/0x770 [ 2516.707307][T31721] ksys_write+0xce/0x180 [ 2516.707323][T31721] __x64_sys_write+0x3e/0x50 [ 2516.707340][T31721] do_syscall_64+0x3d/0x90 [ 2516.707405][T31721] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2516.707430][T31721] RIP: 0033:0x4665d9 [ 2516.707445][T31721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2516.707465][T31721] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2516.707483][T31721] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2516.707496][T31721] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 [ 2516.707508][T31721] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 21:02:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xfffffdef) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:38 executing program 3 (fault-call:1 fault-nth:9): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:38 executing program 5: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.707520][T31721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2516.707595][T31721] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xffffff7f) 21:02:38 executing program 5: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2516.969889][T31756] FAULT_INJECTION: forcing a failure. [ 2516.969889][T31756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2516.983033][T31756] CPU: 1 PID: 31756 Comm: syz-executor.3 Not tainted 5.13.0-syzkaller #0 [ 2516.991470][T31756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.001633][T31756] Call Trace: [ 2517.004918][T31756] dump_stack_lvl+0xb7/0x103 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x10000000000) 21:02:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r0, 0x200001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 21:02:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2517.004945][T31756] dump_stack+0x11/0x1a [ 2517.004961][T31756] should_fail+0x23c/0x250 [ 2517.004986][T31756] should_fail_usercopy+0x16/0x20 21:02:38 executing program 5: ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x7ffffffff000) 21:02:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") [ 2517.005011][T31756] _copy_from_iter+0x131/0x970 [ 2517.005115][T31756] ? check_stack_object+0x61/0x70 [ 2517.005140][T31756] ? __virt_addr_valid+0x15a/0x1a0 [ 2517.005165][T31756] ? __check_object_size+0x253/0x310 [ 2517.005188][T31756] file_tty_write+0x3d1/0x660 21:02:39 executing program 3 (fault-call:1 fault-nth:10): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) [ 2517.005224][T31756] ? n_tty_read+0x10c0/0x10c0 [ 2517.005241][T31756] tty_write+0x24/0x30 [ 2517.005262][T31756] vfs_write+0x69d/0x770 [ 2517.005281][T31756] ksys_write+0xce/0x180 [ 2517.005299][T31756] __x64_sys_write+0x3e/0x50 [ 2517.005318][T31756] do_syscall_64+0x3d/0x90 [ 2517.005405][T31756] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2517.005431][T31756] RIP: 0033:0x4665d9 [ 2517.005445][T31756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2517.005463][T31756] RSP: 002b:00007f84c7eaa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2517.005484][T31756] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2517.005497][T31756] RDX: 00000000ffffff5b RSI: 0000000020000080 RDI: 0000000000000003 21:02:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x8000000000000) 21:02:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") [ 2517.005510][T31756] RBP: 00007f84c7eaa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.005522][T31756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2517.005533][T31756] R13: 00007ffd40877cef R14: 00007f84c7eaa300 R15: 0000000000022000 21:02:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xf0ff7f00000000) 21:02:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x8, 0x1c, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xf0ffffff7f0000) 21:02:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x7}, 0xffffff5b) 21:02:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/247) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x5c}}, 0x40000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 21:02:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x100000000000000) 21:02:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 2: ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0xca3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x200000000000000) 21:02:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x8}, 0xffffff5b) 21:02:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x1c, 0x19e, &(0x7f0000000180)="a64f850c641fbe024ec89c0a1cb237d8ed6edcd13c9503866521c43837a2423734f7ab7c3f71ab2b7bad13d946c56c33198fe3ade013e8b8c0111dcfb4fbf704167c8fc609248a2ef4587cb48a6bbf481a5c494ce6147b6a8066ca08cbb6ba972c2921a166094b2674c959b4ef5257680663581deccf4bf04e847457ae196af13c215a72e0dae500c0b6c72abba0e47195c3e1b08104999a13887065c3e58bc9526b8158ce5aae55ca49598936fd692220443c3465ba76dd4632b94bb5579cc5052c06267cf9b1ac93ff13318b87da58fe6795c5a7ac96eec47c53e8b5c1e59694e8f58c986784c430efa7528017cb52e365c12ad51f05fa72b7999052ba74d2cac6a101643bd20e2c2639786e5c0785111a49024e4ddae2107f6cdaf92294b9ed21ae96c45da66d23365e56a54942accbc9e5abbfc04a290f084349976cac72886e7945f3cb03b0817b71898a48c138730bdec3e7e57f61ccc52fc36f5302ae9fad08cfbaacc0a4cf5f4e953bac32975ab1f975b33d546dd14dae78c5df46b92aef5ba9b8394f4283f945fdc30abb8198b9c71816ec8cd8f2ef24c72b55d4d331d688fad4600cedd764527e35fe4773eaebdc230bb59fe49e5a1ad235c54a150847e5b7fb83508c2faa663ea6d7882d261f1e6c712e8446a7a29d22f5a91506e38b44de703c2e8f379301a3bbefda86a313128c34776fba4c57201d56b9d83122af09b2fefde8ab5ea7f2b55d11724cc3b92ff3596f9b5c1366112c7b19a4c12f82b16e9d2d64f49bea9ba50fed7d51b176c631c73da933f094de542b390e2daf8c78712d5d3a6d2e9595ed05e1f16b8afefb57290d77fd9e51f0f30fd4ae6787f91742e2a6e8ce2969d04c76a72cef1d7b7f4565bd3225c5949886377de4668f062e39e65e69d01ae526f53e31135f490e9c3cbda1f20f54a0c9f9f9ba0fd1fd2780d13da11a80316ea4ae32ea9eee307a226f0f50cb8c54a16d1e35f095739c0b8c422d56db14aef80f0a258d2e50786164d18747749e10a302155810c8c54e8191ff47572e44fc6ecc58c2d91aabcac43cc5e309d64118a7f8c58947b92cf1246be0e7e2cc3a03a5e1571bc0dbf8755fe36e6c75da2fde17f3a80cfad67779cadfaced0a1b2e5c27989db45672a229c448581b331c2870efd35067f583113aa6035e984c02d92397e75f6cf68cf19371b74d903257ad25c826e7a879b4bb322c005f92fb1ba324d7c95e4f1659bf82d0fc658fbd88f94d9643c96f0b611910cc1244a30b2b555b24eb3dcf7929af2f74b1eefa318878d85e2ebe61eba49ccdc2538f08c151748bc62a5341baf283dcdcea68b6bd03e7466132130234993e9b394adc1bcff49aeca236a8cb6788f0259681407f82c4ad615c70d4ea6b46583fd40a1d0bd689f79755a1c5201391617e169aa8ebd32f21342035f8ae97ad4c"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r1, 0x5428) 21:02:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x300000000000000) 21:02:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x700000000000000) 21:02:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bbd7000fcdbdf250a00000008000b00cb000000050035008000000005002f000000000008003400fcffffff080031000100000008003400fe000000080039000300000008003c003f000000"], 0x54}, 0x1, 0x0, 0x0, 0x10008807}, 0x0) 21:02:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x19e, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x8000000000000000) 21:02:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x9}, 0xffffff5b) 21:02:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xeffdffffffffffff) 21:02:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xffff, 0xd0, 0xffff8000, 0x3, 0xf, "71d79821f24cdb5cf36a111d7fc9f2c7481e23"}) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1, 0x2008, 0xbb4, 0x1}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x100000001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x204080, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x5, 0xffff790f, 0x40, 0x1, "d001f9d6578f741a8766efffff1b00008f1200"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) syz_open_pts(r0, 0x200) ioctl$TIOCCBRK(r4, 0x5428) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) write$P9_RXATTRWALK(r5, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x3}, 0xf) 21:02:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xffffff7f00000000) 21:02:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xa}, 0xffffff5b) 21:02:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) ioctl$TCSBRK(r4, 0x5409, 0x3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250800000005002900010000000800320001000080080032007f00000005002d000000000005002f0000000000050033000000000005002d0000001e0008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x20000000) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9e37) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x234, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x861d78f}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x2ef1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2b86}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x5}, {0x6, 0x11, 0xb3}, {0x8, 0xb, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0xff00}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9a}, {0x8, 0xb, 0xb9fa}}]}, 0x234}, 0x1, 0x0, 0x0, 0x8800}, 0x8004000) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0xe1) ioctl$KDSETLED(r2, 0x4b32, 0x28f) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 21:02:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xfffffffffffffdef) 21:02:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:42 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="a64f850c641fbe024ec89c0a1cb237d8ed6edcd13c9503866521c43837a2423734f7ab7c3f71ab2b7bad13d946c56c33198fe3ade013e8b8c0111dcfb4fbf704167c8fc609248a2ef4587cb48a6bbf481a5c494ce6147b6a8066ca08cbb6ba972c2921a166094b2674c959b4ef5257680663581deccf4bf04e847457ae196af13c215a72e0dae500c0b6c72abba0e47195c3e1b08104999a13887065c3e58bc9526b8158ce5aae55ca49598936fd692220443c3465ba76dd4632b94bb5579cc5052c06267cf9b1ac93ff13318b87da58fe6795c5a7ac96eec47c53e8b5c1e59694e8f58c986784c430efa7528017cb52e365c12ad51f05fa72b7999052ba74d2cac6a101643bd20e2c2639786e5c0785111a49024e4ddae2107f6cdaf92294b9ed21ae96c45da66d23365e56a54942accbc9e5abbfc04a290f084349976cac72886e7945f3cb03b0817b71898a48c138730bdec3e7e57f61ccc52fc36f5302ae9fad08cfbaacc0a4cf5f4e953bac32975ab1f975b33d546dd14dae78c5df46b92aef5ba9b8394f4283f945fdc30abb8198b9c71816ec8cd8f2ef24c72b55d4d331d688fad4600cedd764527e35fe4773eaebdc230bb59fe49e5a1ad235c54a150847e5b7fb83508c2faa663ea6d7882d261f1e6c712e8446a7a29d22f5a91506e38b44de703c2e8f379301a3bbefda86a313128c34776fba4c57201d56b9d83122af09b2fefde8ab5ea7f2b55d11724cc3b92ff3596f9b5c1366112c7b19a4c12f82b16e9d2d64f49bea9ba50fed7d51b176c631c73da933f094de542b390e2daf8c78712d5d3a6d2e9595ed05e1f16b8afefb57290d77fd9e51f0f30fd4ae6787f91742e2a6e8ce2969d04c76a72cef1d7b7f4565bd3225c5949886377de4668f062e39e65e69d01ae526f53e31135f490e9c3cbda1f20f54a0c9f9f9ba0fd1fd2780d13da11a80316ea4ae32ea9eee307a226f0f50cb8c54a16d1e35f095739c0b8c422d56db14aef80f0a258d2e50786164d18747749e10a302155810c8c54e8191ff47572e44fc6ecc58c2d91aabcac43cc5e309d64118a7f8c58947b92cf1246be0e7e2cc3a03a5e1571bc0dbf8755fe36e6c75da2fde17f3a80cfad67779cadfaced0a1b2e5c27989db45672a229c448581b331c2870efd35067f583113aa6035e984c02d92397e75f6cf68cf19371b74d903257ad25c826e7a879b4bb322c005f92fb1ba324d7c95e4f1659bf82d0fc658fbd88f94d9643c96f0b611910cc1244a30b2b555b24eb3dcf7929af2f74b1eefa318878d85e2ebe61eba49ccdc2538f08c151748bc62a5341baf283dcdcea68b6bd03e7466132130234993e9b394adc1bcff49aeca236a8cb6788f0259681407f82c4ad615c70d4ea6b46583fd40a1d0bd689f79755a1c5201391617e169aa8ebd32f21342035f8ae97ad4c"}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0xffffffffffffffff) 21:02:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xb}, 0xffffff5b) 21:02:43 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) syz_open_dev$tty1(0xc, 0x4, 0x4) 21:02:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/92) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_pts(r0, 0x400000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x8, 0x800}) 21:02:43 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="f4613321db5bd69ed1d647bbc997ef5692ac866dc5ab2865dee7ca32e07bddc384d05312d64a22abd8e41f11eff361c1e8f8519b4d7ff692abc0896c5ca116a77da6bea40bb1f3f22f6dff019a33efc040c51924df07533d51ca0ed03b61e7209871a2b3e64536498fd178ac8e4cab") 21:02:43 executing program 4: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 21:02:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x88c0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x200, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0xf25}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xa7}, {0xc, 0x90, 0x78529867}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x750}, {0xc, 0x90, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1ff80}, {0xc, 0x90, 0x2}}]}, 0x200}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x3) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 21:02:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:44 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:44 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x268400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_pts(r0, 0x80000) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 21:02:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:44 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xd}, 0xffffff5b) 21:02:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa2081, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:02:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) 21:02:45 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 21:02:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:02:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="a64f850c641fbe024ec89c0a1cb237d8ed6edcd13c9503866521c43837a2423734f7ab7c3f71ab2b7bad13d946c56c33198fe3ade013e8b8c0111dcfb4fbf704167c8fc609248a2ef4587cb48a6bbf481a5c494ce6147b6a8066ca08cbb6ba972c2921a166094b2674c959b4ef5257680663581deccf4bf04e847457ae196af13c215a72e0dae500c0b6c72abba0e47195c3e1b08104999a13887065c3e58bc9526b8158ce5aae55ca49598936fd692220443c3465ba76dd4632b94bb5579cc5052c06267cf9b1ac93ff13318b87da58fe6795c5a7ac96eec47c53e8b5c1e59694e8f58c986784c430efa7528017cb52e365c12ad51f05fa72b7999052ba74d2cac6a101643bd20e2c2639786e5c0785111a49024e4ddae2107f6cdaf92294b9ed21ae96c45da66d23365e56a54942accbc9e5abbfc04a290f084349976cac72886e7945f3cb03b0817b71898a48c138730bdec3e7e57f61ccc52fc36f5302ae9fad08cfbaacc0a4cf5f4e953bac32975ab1f975b33d546dd14dae78c5df46b92aef5ba9b8394f4283f945fdc30abb8198b9c71816ec8cd8f2ef24c72b55d4d331d688fad4600cedd764527e35fe4773eaebdc230bb59fe49e5a1ad235c54a150847e5b7fb83508c2faa663ea6d7882d261f1e6c712e8446a7a29d22f5a91506e38b44de703c2e8f379301a3bbefda86a313128c34776fba4c57201d56b9d83122af09b2fefde8ab5ea7f2b55d11724cc3b92ff3596f9b5c1366112c7b19a4c12f82b16e9d2d64f49bea9ba50fed7d51b176c631c73da933f094de542b390e2daf8c78712d5d3a6d2e9595ed05e1f16b8afefb57290d77fd9e51f0f30fd4ae6787f91742e2a6e8ce2969d04c76a72cef1d7b7f4565bd3225c5949886377de4668f062e39e65e69d01ae526f53e31135f490e9c3cbda1f20f54a0c9f9f9ba0fd1fd2780d13da11a80316ea4ae32ea9eee307a226f0f50cb8c54a16d1e35f095739c0b8c422d56db14aef80f0a258d2e50786164d18747749e10a302155810c8c54e8191ff47572e44fc6ecc58c2d91aabcac43cc5e309d64118a7f8c58947b92cf1246be0e7e2cc3a03a5e1571bc0dbf8755fe36e6c75da2fde17f3a80cfad67779cadfaced0a1b2e5c27989db45672a229c448581b331c2870efd35067f583113aa6035e984c02d92397e75f6cf68cf19371b74d903257ad25c826e7a879b4bb322c005f92fb1ba324d7c95e4f1659bf82d0fc658fbd88f94d9643c96f0b611910cc1244a30b2b555b24eb3dcf7929af2f74b1eefa318878d85e2ebe61eba49ccdc2538f08c151748bc62a5341baf283dcdcea68b6bd03e7466132130234993e9b394adc1bcff49aeca236a8cb6788f0259681407f82c4ad615c70d4ea6b46583fd40a1d0bd689f79755a1c5201391617e169aa8ebd32f21342035f8ae97ad4c"}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)) 21:02:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$P9_RMKDIR(r0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/191, 0x6e, 0x40000041, 0x0, 0x0) 21:02:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xe}, 0xffffff5b) 21:02:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x83f) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="538b4f171460e5f557d1") ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/120) 21:02:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xf}, 0xffffff5b) 21:02:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000300)) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/161) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000340)={0x6, 0x3}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) syz_open_pts(r3, 0x101000) write$P9_RMKDIR(r0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/229, 0xe5, 0x1, 0x0) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) socketpair(0x15, 0x6, 0x8001, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r6, 0x29, 0x8, 0x9, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x7800, 0x700, 0x7d8d, 0x5}}) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000380)=0x8001, 0x4) syz_open_pts(r4, 0x400) 21:02:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xb7, 0x0, 0x7e, 0x9, 0x17, "c67fb2a3581a45f2ad8ea08d2f85c52aeb57dc"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101980, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 21:02:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:02:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x18}, 0xffffff5b) 21:02:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x7) r1 = syz_open_pts(r0, 0x40000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="51677a75422ed2972f6f0b1912d3da9d722aa707ec6b256ee6b4c77d178cd8bcbca7dee0863546eee52383e03e92f4b51dc0bdeedbf0c705d0f3d3119b52637026a3a724d0546f4dc6d6753b72a9c7a1d85b19734d6e0e0cce1abb9a7abf88ee64c60e64bc89dd289b58923013db201fe0112e2ff2c2354fa3fb789f03e095d7177e820188bb52a6bf31d4243a7592eea6") write$P9_RMKDIR(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) 21:02:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x5, 0xb, 0xc2, &(0x7f0000000100)="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"}) syz_open_dev$ttys(0xc, 0x2, 0x0) 21:02:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:47 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 21:02:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000e00)="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") ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/192) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="35758fa453a8976d6f2d4df1bfa5a94555d893c4b3133d18bdf3d4e9d9cb4d15ef4704df1d7cf5214f0c265dd94d51d089fcc55b6bf9919074627cd3ebf013c66e4e531a507a5ae6f18e0f250f400275c1b28ff5ca282cd93f09849771804b21898852179151575590b0b6c0338042752f406d7dd23887fab9c84485e01145fd106e9751c2d5582ea5a083c914fe0fed89bb558f9e97ee41b2f3f4f5484afee790b49f4662a7bf774edc983deef3c7abb12cfe6e4bceaa203d63e454a7ad17f2634772cb07c9b58b6b2d6e8940c47bd68456cf4e1ad3a9bfffadf1cc") 21:02:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x1a}, 0xffffff5b) 21:02:48 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:48 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x40}}, 0x14) 21:02:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/216) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x101, 0x7, 0x6, 0x0, 0xb, "0a8bee3485acde438ecc0318255b723bdb0f9a"}) 21:02:48 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xb44, 0x1000, 0x4, 0x0, 0x1a, "e73ba9d26b9121ed29c101c459814bed94a1ff"}) 21:02:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:48 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x1b}, 0xffffff5b) 21:02:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x51}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 21:02:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe8, 0x48083) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = mq_open(&(0x7f0000000100)='\x00', 0x1, 0x101, &(0x7f0000000140)={0x3, 0x1, 0x1000, 0x3}) mq_timedreceive(r3, &(0x7f0000000180)=""/190, 0xbe, 0x1, 0x0) write$P9_RMKDIR(r2, 0x0, 0x0) 21:02:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x5, 0x3f, 0x1ff, 0x8, 0x14, "02cee53e1b34f19f2f40690ba7ee39fc2bf109"}) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x4, 0x1, 0xffffffff, 0x4, 0x1, "114fadf19232bf351145c8ab22b1f2b5645345"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) 21:02:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xf8}, 0xffffff5b) 21:02:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0x7, &(0x7f0000000240)={&(0x7f0000000300)={0xf4, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf4}}, 0x40000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x46ac, 0xffff, 0x92cf, 0x1, 0x3, "5ba1578d1e58fa7d2fe9a9c5012c4330406190"}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/235) 21:02:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='-@.\x00\xb1\xfb\b\xc6 \xf8\xd0C\xe5_A\xb5h\x9d\x02\xe5\xc7aW\x86oiS&\x9f!\x03W\xb2~\x8asew\x14\xd2\xb2D\xa4q\xfcT^q\x13\xa1~c\x16\xac\xbe\nJU\xfe\xaax[\xe6\xfb\x1aOo\x9f\x98\x01/\x1aN2\x11Lp\xcb\x8f\xc2\x92l\x8eM\xbefAS\xd5h\'\x04\xb9@\xa9\xbc\xfa\xd4F\x9bc\x8c0Le\xde\xd5\x12|\xf4\xa7\xa9Q\x86\xd3e\xb7$\xa0\x0f') ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:49 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x3, {0x2, 0x0, 0x1000}}) 21:02:49 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xc}, 0xffffff5b) 21:02:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xfc}, 0xffffff5b) 21:02:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4, {0x2, 0x0, 0x1000}}) 21:02:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x541b, &(0x7f0000000280)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0xfffffa55}, 0xb) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x2c, 0xd50, 0x6, 0x7ff, 0x17, "d7582b704ad3422518a5e22ead804ac6bf3d90"}) 21:02:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x5, {0x2, 0x0, 0x1000}}) 21:02:50 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) 21:02:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_pts(r0, 0x80200) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0xffff, 0x811, 0x8, 0x74, 0xe, "4a89437f1a56208d4aa1daf950e454bdeb733e"}) 21:02:50 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f8, r0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f34}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x3) write$P9_RMKDIR(r1, 0x0, 0x41) 21:02:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0xff0, 0x47, 0x2, 0x3}}) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x6, {0x2, 0x0, 0x1000}}) 21:02:51 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7f, 0x20001) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x308f, 0x42000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:02:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000"], 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020029bc7000fedbdf2504000000080002000200000008000200020000000800010003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004040) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xfffffa0f) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x200000, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x4b4a, 0xfffffffffffffffd) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x20008010) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000040)) 21:02:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x7, {0x2, 0x0, 0x1000}}) 21:02:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x1, 0xff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, 0x0, 0x428, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xf4}}, 0x80) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0xffffffff}, 0xf) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:51 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x4200) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x8}, 0xffffff5b) 21:02:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xa, {0x2, 0x0, 0x1000}}) 21:02:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x2200) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x400, 0x74802) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xffffffdf, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d4feffff", @ANYRES16=0x0, @ANYBLOB="200029bd709e4b0ed0958c67ad36"], 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x4000011) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x9, 0x4) 21:02:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2cc8c301) syz_open_pts(r1, 0x10000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 21:02:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40086602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:52 executing program 4: request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0xfffffffffffffffa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x20, 0x2, 0x6}}, 0x14) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000040)={0x2, 0x9, 0x80000001, 0x5}, &(0x7f0000000080)) 21:02:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xb, {0x2, 0x0, 0x1000}}) 21:02:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="e543bd6a5926850c3b76b04f332ef9a9e0dd3a79223e1360cd046a91271bd7ad9a40b7b8d11599d55e5e6f4f549101c50b010e0f8838948cdb2c854e7ccf000e5643fcd89264ec553a848a36fc50eab5e1b3d17026bc4fec1f08126d8e861a2f48802f1e15b06db6cf7bc88cf8fee8315c4f66f3a82de34ccc06c535709e12df0a25d8f637060e6d0b8e77b7a26e5704257f133be98d6056dceb86d7c10446bf847a64f906272e4762b7850000000000000000000000000000000000000000000000707a750dbd4ac3b266e50b95a9cef931395fe093921f2db1154708d077c837c39a7a8614", @ANYRES16=r2, @ANYBLOB="000426bd7000fedbdf240200733125110d932f87c233dcbd0000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xddb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 21:02:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40087602, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xc, {0x2, 0x0, 0x1000}}) 21:02:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x9}, 0xffffff5b) 21:02:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x401c5820, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xd, {0x2, 0x0, 0x1000}}) 21:02:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCCBRK(r0, 0x5428) 21:02:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0xe6) write$P9_RMKDIR(r0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x302000, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000000)=""/90) 21:02:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:53 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x1000000001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x2}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1618c6, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r2, 0x4b4a, 0xfffffffffffffffd) 21:02:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xe, {0x2, 0x0, 0x1000}}) 21:02:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x40, 0x4, 0x4}}, 0x14) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="7ae297bbcffc7a79ec55666548e07e0586a32bd7253bba7515fec18bd7115e46e50b01a05456324f14a68d2bd237535ed6b7150491e2debd5e5468e5acce9c32b8cea0") 21:02:53 executing program 4: getegid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000780)={0x2, 0x1, 0x8, 0x1d, 0x33, &(0x7f0000000380)="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"}) write$P9_RMKDIR(r0, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/171) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'sit0\x00', r3, 0x29, 0x20, 0xbb, 0x3ff, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x6, 0x4}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r4, 0x2f, 0x5, 0x7f, 0x1000, 0x5e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x10, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', r6, 0x2f, 0x80, 0x60, 0x3c4, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x80, 0x4, 0x100}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) pipe2$9p(&(0x7f0000000000), 0x800) 21:02:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:02:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x0, 0x1000}}) 21:02:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 21:02:54 executing program 4: request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)=':\x00', 0xfffffffffffffffe) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x20, 0xc, 0x1cd, &(0x7f0000000000)="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"}) 21:02:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x11, {0x2, 0x0, 0x1000}}) 21:02:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x3, 0x0, 0x1000}}) 21:02:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x701080) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x404000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x4c001) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x141200) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x0, 0x1009a8, 0x9, 0x0, 0x7}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x400, 0x5df9}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCCBRK(r3, 0x5428) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x7, 0xd61, 0x2, 0x0, 0x12}) 21:02:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80087601, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:02:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x4, 0x0, 0x1000}}) 21:02:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x801c581f, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:55 executing program 2: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fb010000000000000000050000000000080005000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20042005}, 0x28000001) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:55 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/198) 21:02:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x5, 0x0, 0x1000}}) 21:02:55 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:55 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x9b}, 0xffffff5b) 21:02:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x6, 0x0, 0x1000}}) 21:02:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8091) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x7, 0x0, 0x1000}}) 21:02:56 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x49}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x880) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}}, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r3) ioctl$TIOCL_SETSEL(r2, 0x4b4a, 0xfffffffffffffffd) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 21:02:56 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r1, 0x0, 0x0) socketpair(0x2a, 0x6, 0xfff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd700000000080060000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000060004000000000066db289ad0c743e7bd5fb1a725f6231c930de4f1be6895ec512a4a4bc1aa56e2e3c58081bf705e101c8807d66e68a0fdba00d286ed89a7ba67f4658b43f3549b7cc2b76b00c79b1a186e461f776210137467b6fc32d5c766e54f3fd692d8937caf22febf875450600222a222883c4d50d77b607427ef7e5a3fb0b98600a589a6d60dbe17108cdea9f40bdaf80d7720991cb9488683f88c5eb26a39a28eca3283a21b5ae3bd7aa02195d0d6be133e293b4dad01b60adc29ee04577c94506883867a5155c6c44a41ca4f7c463d74feb89cba59623b68093dbb1272c3c1e7ba663d476334b6aff39412d33620728ab6464c8c5eb18e1bd1045f3c01bf607b426e258f063b771799691ff9b23333a75f1bef0b63c064bef3a6254080673c4b745378a4ced503bf671af2e2d2ed0e94b1a572337bb49c18857cbc3f4889e8892b83747a9589652304112ebfc18c6dbddec880a7dd99f7ef794c61fdd8ef42fccf7186259312e351a803d01acc87c74b56240ac07be8fba64ed3b24a7aa5f23a7b9f08d38be5e38a18103ee87578e35e3c52e6161ce2372347b00f981c928184e0401aa68834a6d977561f6348ca04c4489f40468dcb50a805207e5cf79bcabf3acfea1690f98b0311a37886c44c52caee36cb07d35d23f750c01d6382351b58828b764b2b36a72816c7f8488f848364beaab5ddf00633be"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:02:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xa, 0x0, 0x1000}}) 21:02:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:02:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x3, {0x2, 0x0, 0x1000}}) 21:02:57 executing program 2: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000001140)=@abs, &(0x7f0000000080)=0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x12020, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b4a, 0xfffffffffffffffd) 21:02:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xb, 0x0, 0x1000}}) 21:02:57 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6c}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0x1000, 0xc6, 0xffe3, 0xf}}) 21:02:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4, {0x2, 0x0, 0x1000}}) 21:02:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xc, 0x0, 0x1000}}) 21:02:57 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x204642, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) 21:02:57 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x5, {0x2, 0x0, 0x1000}}) 21:02:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xd, 0x0, 0x1000}}) 21:02:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x2}, 0xffffff5b) 21:02:57 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0xffffff9b}, 0xffffff5b) 21:02:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0xc800) 21:02:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x6, {0x2, 0x0, 0x1000}}) 21:02:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xe, 0x0, 0x1000}}) 21:02:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000000)={0xa6, 0x29, 0x1, {0x1ffe00, [{{0x8, 0x2, 0x7}, 0x4, 0x1f, 0x7, './file0'}, {{0x1, 0x3, 0x7}, 0x3ff, 0x7, 0x7, './file0'}, {{0x1, 0x4, 0x8}, 0x0, 0x9, 0x7, './file0'}, {{0xc1, 0x3, 0x7}, 0x6, 0x4, 0x7, './file0'}, {{0x20, 0x3, 0x4}, 0x0, 0xef, 0x7, './file0'}]}}, 0xa6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) accept$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) 21:02:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x4, {0x2, 0x0, 0x1000}}) 21:02:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x7, {0x2, 0x0, 0x1000}}) 21:02:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xf, 0x0, 0x1000}}) 21:02:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xa, {0x2, 0x0, 0x1000}}) 21:02:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8091) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x3}, 0xffffff5b) 21:02:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x11, 0x0, 0x1000}}) 21:02:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xb, {0x2, 0x0, 0x1000}}) 21:02:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000700000006001600000200000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0000000080060016003f0000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000900000006001600050000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0000080000060016000900000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b005f4e0000060016000900000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b0004000000060016000600000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0001000000060016000000000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b008a00000006001600080000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00f299000006001600070000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00fbffffff0600160050000000050012000000000042764a79ea2f8fbc4c53b7f334430b09bbd0e9a3718e092b23c392e687e44cde5e7f251c0269619edcf1e3ef1dcfb803456b07b869aa2392578313865b9c7e74ed45a264f83a4e78d87f800b471697676009500fad4000e1197fbc34c4245b7983b09e6de009c42d6f420aae08db6964467f5bf41a1e7f86e65a17da3baada48cf3067"], 0x27c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8091) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fedbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000700000006001600000200000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0000000080060016003f0000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000900000006001600050000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0000080000060016000900000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b005f4e0000060016000900000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b0004000000060016000600000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0001000000060016000000000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b008a00000006001600080000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00f299000006001600070000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00fbffffff0600160050000000050012000000000042764a79ea2f8fbc4c53b7f334430b09bbd0e9a3718e092b23c392e687e44cde5e7f251c0269619edcf1e3ef1dcfb803456b07b869aa2392578313865b9c7e74ed45a264f83a4e78d87f800b471697676009500fad4000e1197fbc34c4245b7983b09e6de009c42d6f420aae08db6964467f5bf41a1e7f86e65a17da3baada48cf3067"], 0x27c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8091) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:02:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xc, {0x2, 0x0, 0x1000}}) 21:02:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2000) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x1000}}) 21:02:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xd, {0x2, 0x0, 0x1000}}) 21:02:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x4}, 0xffffff5b) 21:02:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xe, {0x2, 0x0, 0x1000}}) 21:02:59 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x202200, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$P9_RMKDIR(r0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) write$P9_RAUTH(r2, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x4, 0x2, 0x2}}, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r3, 0x4b63, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x1, 0x1}}, 0x14) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x800) syz_open_dev$ttys(0xc, 0x2, 0x1) write$P9_RREADDIR(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x122) 21:02:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0x1000}}) 21:02:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x407efaee) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x1, 0x2, 0x400, 0x1, 0x14, "654c06c2c8a69a119d49ef86b401cf7ee5c513"}) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xf, {0x2, 0x0, 0x1000}}) 21:02:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x1000}}) 21:02:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) write$P9_RMKDIR(r0, 0x0, 0x0) 21:02:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x7, 0x1000}}) 21:02:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x11, {0x2, 0x0, 0x1000}}) 21:03:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x5}, 0xffffff5b) 21:03:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x300, 0x1000}}) 21:03:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x3, 0x0, 0x1000}}) 21:03:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x4, 0x0, 0x1000}}) 21:03:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x700, 0x1000}}) 21:03:00 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:00 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x5, 0x0, 0x1000}}) 21:03:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x6}, 0xffffff5b) 21:03:01 executing program 4: ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000080)=0xffb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfff8, 0x100, 0x1, 0x3ff}}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x201}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) write$P9_RMKDIR(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b0036020000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) 21:03:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2000, 0x1000}}) 21:03:01 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x6, 0x0, 0x1000}}) 21:03:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x7, 0x0, 0x1000}}) 21:03:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1002}}) 21:03:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 21:03:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xa, 0x0, 0x1000}}) 21:03:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1003}}) 21:03:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x7}, 0xffffff5b) 21:03:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xb, 0x0, 0x1000}}) 21:03:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1004}}) 21:03:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x4000) 21:03:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xc, 0x0, 0x1000}}) 21:03:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1007}}) 21:03:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xd, 0x0, 0x1000}}) 21:03:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x2}}) 21:03:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xe, 0x0, 0x1000}}) 21:03:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x3}}) 21:03:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xf, 0x0, 0x1000}}) 21:03:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:03 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:03 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x643, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:03 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:03 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x4}}) 21:03:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x11, 0x0, 0x1000}}) 21:03:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x7}}) 21:03:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x9}, 0xffffff5b) 21:03:04 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r1, 0x29, 0x7, 0x8, 0x6, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x20, 0x229, 0xa66}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r1, 0x4, 0x80, 0xfd, 0xfffffffa, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x1, 0x1, 0x8, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x2f, 0x3f, 0x81, 0xfff, 0x64, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x0, 0x1, 0x64a}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) write$P9_RMKDIR(r4, 0x0, 0xffffff86) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r2, 0x2f, 0xa6, 0x3f, 0x80000000, 0x34, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xf8c0, 0x20, 0x891, 0x7}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', r3, 0x4, 0x8, 0x2, 0x8, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x8000, 0x80, 0x6, 0x4}}) 21:03:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x300}}) 21:03:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x700}}) 21:03:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x1000}}) 21:03:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 21:03:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0x1000}}) 21:03:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xa}, 0xffffff5b) 21:03:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x2000}}) 21:03:05 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x1000}}) 21:03:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f00000000c0)="1a") r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffc01, 0x121000) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) 21:03:05 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x300, 0x1000}}) 21:03:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/4096) pipe2$9p(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RREADDIR(r2, &(0x7f0000001180)={0x109, 0x29, 0x2, {0x3, [{{0x20, 0x3, 0x4}, 0x10001, 0x2f, 0x7, './file0'}, {{0x20, 0x20, 0x1}, 0x0, 0x8, 0x7, './file0'}, {{0x4, 0x2, 0x6}, 0x9, 0x8, 0x7, './file0'}, {{0x6, 0x1, 0x5}, 0xbd6, 0x5, 0xd, './file0/file0'}, {{0x2, 0x1, 0x7}, 0x2, 0x3a, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x2, 0x3f, 0x7, './file0'}, {{0x0, 0x0, 0x7}, 0x32534714, 0x20, 0x7, './file0'}, {{0x0, 0x0, 0x3}, 0xfffffffffffffffb, 0x40, 0x7, './file0'}]}}, 0x109) 21:03:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2000, 0x1000}}) 21:03:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xb}, 0xffffff5b) 21:03:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x2}}) 21:03:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1002}}) 21:03:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x4dc, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PEERS={0x464, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b8, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x191, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6e8c784a18474d65878c532ff148de72d40c1b3e6943c56f6933c93daeed6bdd"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4dc}}, 0x90) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x3}}) 21:03:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1003}}) 21:03:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x4}}) 21:03:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1004}}) 21:03:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x7}}) 21:03:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc}, 0xffffff5b) 21:03:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x2}}) 21:03:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x300}}) 21:03:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffff, 0x121180) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000400)={0x0, 0x5, 0x70, 0x0, 0x12}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x4000804}, 0x4002) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r2, 0x0, 0x0) 21:03:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x700}}) 21:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x3}}) 21:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x4}}) 21:03:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x2000}}) 21:03:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x300}}) 21:03:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xd}, 0xffffff5b) 21:03:07 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x2}}) 21:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x2000}}) 21:03:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x45b8, 0x3f, 0x2, 0x2, 0x12, "a858cc485a4c982d4651711a3d2930e4979068"}) 21:03:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x3}}) 21:03:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:07 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:08 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x2}}) 21:03:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe}, 0xffffff5b) 21:03:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x4}}) 21:03:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x3}}) 21:03:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 21:03:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x7}}) 21:03:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x4}}) 21:03:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x300}}) 21:03:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x300}}) 21:03:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x700}}) 21:03:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x2000}}) 21:03:08 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x2000}}) 21:03:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:09 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) 21:03:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 21:03:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x2}}) 21:03:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:09 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xd}, 0xffffff5b) 21:03:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x3}}) 21:03:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x18}, 0xffffff5b) 21:03:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x1ff, 0x7}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x4}}) 21:03:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:10 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x8, 0x8}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000326bd7000ffdbdf25090000000800140012000000830a6d0d0c000000080014000500000085001300810000000800140003000000050015000200000005001d00130000000500130006000000050013005f000000"], 0x5c}, 0x1, 0x0, 0x0, 0xa0}, 0x45) syz_open_pts(r1, 0x408000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000240)={0x6, 0x4}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, 0x0, 0x0) timerfd_gettime(r7, &(0x7f0000000080)) write$P9_RXATTRCREATE(r5, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) 21:03:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xa4e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x6efa) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x8, 0x1, 0x19, 0xd, "f5b3e8365f2d637731ec5a79622c437b9c22503ea5751e3d168b7b1215ff82b3c6188142e52e0414610632220366ce1a7983f23fc15ea35eeec56a687761503b", "ef32293b9252587e46c3af9d4a690be2fdf5f8492ca010acedef0759c6ab46e4", [0x5, 0x27b]}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8854) 21:03:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x300}}) 21:03:10 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:10 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x2000}}) 21:03:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x5, 0x3, 0x10001, 0x4, 0xa, "8c7639c70c79b397e379f57e617de26cf6cf07"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x40000) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000100)=0x5) 21:03:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1a}, 0xffffff5b) 21:03:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6149) ioctl$KDSETLED(r1, 0x4b32, 0xccba) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1000}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x5, 0x3, 0x4, 0x79c7, 0x2}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x5, 0x8a77, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x68, 0x0, 0x5a, 0x29, 0x0, @remote, @empty, {[@rr={0x7, 0x13, 0x96, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2]}]}}}}}) 21:03:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0xa, 0x223, 0x104, 0x13}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x120, 0x0, 0x200, 0x7, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x25}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x120}, 0x1, 0x0, 0x0, 0x44000}, 0x40001) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = syz_open_pts(r0, 0x80000) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000240)=""/214) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/235) 21:03:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1245, 0x3f, 0x7, 0x3, 0x1a, "2758914ff0141c9cc4e84938fca2c158fefd50"}) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:11 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x4c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:11 executing program 0: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x6, 0xfffffffffffffff8, 0x80, 0xfb8e, 0xf6d, 0x400, 0x5, 0x80000001}, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x8, 0xfff, 0x9, 0x6594, 0x33}, &(0x7f0000000100)={0x200, 0x5, 0x9, 0x9, 0x8, 0xdba, 0xfffffffffffffffd, 0xfffffffffffffff7}, &(0x7f0000000180)={r0, r1/1000+60000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x8}}) ioctl$TCSBRK(r2, 0x5409, 0xff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000005c0)={0x2, 0x1, 0x3, 0xa, 0xd5, &(0x7f00000001c0)="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"}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x7fffffff, 0x6}) 21:03:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x40081271, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x8000) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) 21:03:11 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000003) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_pts(r2, 0x280080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000001c0)={0x400, 0x200, 0xec50, 0x173d7000, 0x12, "d0de444f10137910979568d604eab697722dc0"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9ed) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f00000000c0)=""/221) 21:03:11 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) 21:03:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/213) 21:03:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1b}, 0xffffff5b) 21:03:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x20, 0xfff, 0x0, 0x0, 0x3}}) 21:03:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0xfffe, 0x81}}) 21:03:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x6, 0xfffffc01, 0xfffffff9, 0x9, 0xf, "bb10987e5f2297c0fba3e2b96a84a30e27aa8a"}) ioctl$KDSETLED(r1, 0x4b32, 0xfffffffffffffff7) 21:03:12 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x1}}) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:03:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SVE_SET_VL(0x32, 0xa0c2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0x40, 0x4, 0x4, @local, @mcast1, 0x80, 0x20, 0x8, 0x581}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', r3, 0x4, 0x6, 0xb5, 0xffffffff, 0x20, @empty, @private1, 0x50, 0x7, 0xbe4e, 0x8000}}) 21:03:12 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x2f, 0x3, 0x1, 0x89, 0x1, @empty, @mcast2, 0x8000, 0x7800, 0x7fffffff, 0x2}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_dev$ttys(0xc, 0x2, 0x0) 21:03:12 executing program 0: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x800) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) accept4$unix(r2, 0x0, &(0x7f0000000200), 0x80800) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:12 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc0}, 0xffffff5b) 21:03:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x0, 0x9b1}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_pts(r1, 0x40000) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="522355599fb7"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x24000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) write$P9_RMKDIR(r0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) 21:03:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xfffd, 0x1000, 0x2, 0x0, 0x2}}) 21:03:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:13 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x40, 0x1000, 0x0, 0x2}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x480242) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x1, 0x8, 0x8, 0x0, 0x11}) 21:03:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x401, 0x1000}}) 21:03:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x1000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x86, 0x8, 0x103, 0x6, 0x1a, "f0a96e3c772186cf576a825cde2bc58a3739a9"}) 21:03:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000840)={0x0, 0xfffffffffffffffe, 0x95, 0x2, @scatter={0x4, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/76, 0x4c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000580)=""/232, 0xe8}]}, &(0x7f00000006c0)="3c1445e4c09d92835cc51fdf59f204849aa1c912655658d52047091842d0661e8ee16907ee8f0707885c5a19cf815975f09172e1b158e0ced0fcc7927cc4f8d44b5784b6f777027c15a0dba50aa3689c97de8d07486b8e2a08e1f0241f1e4e847cd68e69142deb0d1b6f3577334d031788cf651d984f30b82d60b6e77fd619b5859fe9a48e6fe0d7b49ade7c9109469119b41d0066", &(0x7f0000000780)=""/91, 0x100, 0x21, 0x2, &(0x7f0000000800)}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x800, 0xfffe, 0x1}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x19, 0x153, &(0x7f00000000c0)="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"}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x200001) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 21:03:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x0, 0x54, 0x47, @empty, @local, 0x7, 0x8, 0xfff, 0x4}}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x2, 0x19, 0x90, &(0x7f00000000c0)="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"}) 21:03:14 executing program 1: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040)) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x0, {0x80, 0x2, 0x1}}, 0x14) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) syz_open_pts(r1, 0x4c497d3b7ff75dcf) syz_open_dev$tty1(0xc, 0x4, 0x1) 21:03:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) 21:03:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:14 executing program 0: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1ff, 0x1004, 0x8}}) 21:03:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x2, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7d}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0}, 0x1) 21:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x9, 0x2, 0x3, 0x1000, 0x1}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/162) 21:03:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x401, 0x1000, 0x0, 0x4}}) 21:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="f34827f24ec1e7eacf2ffa61f2e018757cb0995daac473e6e04155d49e379a5082494473db8b3be8c0e115f9943a0760ca7e83cda9577ffde76c334c8afbe52984887fc68fa4fb53fed1039c03b8811c3f20a44fbd2eb18dc79c80219c85f6e23e0b19c45ec107fa4d50b43e42209dac50e68bc47212af471fab6df4144259") ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1001, 0x1, 0x0, 0x2}}) 21:03:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x1}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x3}}) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffffffff, 0x80) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x2, 0x4, 0x400, 0x1, 0x0, "e19af626dfb4c7cbc09ca805b84c808850cd93"}) ioctl$KDSETLED(r2, 0x4b32, 0x8001) 21:03:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf0}, 0xffffff5b) 21:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/212) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000)) 21:03:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0x1000}}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:03:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:14 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/84) 21:03:14 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x230, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x230}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:15 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40095}, 0x80) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:15 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf8}, 0xffffff5b) 21:03:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1000, 0x1, 0x0, 0x10}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x8, 0x1, 0x7, 0x4}}) 21:03:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x101, 0x1a5000) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/140) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xfff8, 0x1000}}) r2 = syz_open_pts(r1, 0x442400) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000640)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000680)={0x9, 0x3f}) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000600)={0x2, 0x1, 0x12, 0x16, 0x1df, &(0x7f0000000200)="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"}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r6, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r6, 0x4, 0x3f, 0x2, 0x10001, 0x20, @rand_addr=' \x01\x00', @private0, 0x8, 0x7, 0xffffffff, 0x5}}) 21:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x200, 0x0, 0x9}}) 21:03:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x0, 0x9, 0x7, 0x8, "6ebd55a3b0a5a43b0554b996a05a6a0b77a931363ed2dec1b9ebce80e304f08fd85356759671aea5fbfbfd7db7b16793084ff3e2da75706b953a04121ae26336", "32997160d20b08bc083d887b2e6d10338ad4837f6785317b7cfa03f1a599031f18c0f9ec678721c7247658683a264d45388ce711958c68216156a25102028e7c", "b4acf4dc55d6bbffdba3eb9220a5ea871e370bb7e4078a908483a330838e9a2a", [0x0, 0xf620000000000000]}) ioctl$TCSBRK(r0, 0x5409, 0x100000000) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2c000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 21:03:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x4, 0x3, 0x5, 0x4, 0x21, @private0, @loopback, 0x8031, 0x40, 0x0, 0x7}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x400040) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8041}, 0x48085) 21:03:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/252) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000001c0)=0x8) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x1000, 0x101, 0x8000}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd61, 0x7, 0x0, 0x1, 0x1b, 0x8, "3b22fb6990486c0c4f809d92c1885aca6e1f060287acd3ec5469a3a105fdffffff0000002986d89fe51d15c0582de57e5a6765f7f5e50a5de81cd5cb54b55203", "2f89cbfabfb9442900746c6a5367accaac3eac7c2e4fb6fd40ce3e3b317b645d14f21febdb37ed1663dc9670d86534cc4f288462a2a90755e886ecdf432b9bb1", "44a1a0c9d952c8dbec791fc7fd2f8bd9051407fe0936c8728f1e1349c4f0a338", [0x1ff, 0x6]}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x80000) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000080)) 21:03:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:16 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:16 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x1000, 0x0, 0x0, 0x1}}) 21:03:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5c, 0x7, 0x9, 0x7f, 0x4}}) 21:03:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x49e0, 0x53, 0x4, 0x2d58000000000, 0x5, 0x5}, &(0x7f0000000040)={0x5, 0x5, 0x4f, 0x8, 0x8, 0x5, 0x0, 0x81}, &(0x7f0000000080)={0x7d28, 0x80000000, 0x2, 0x92b2, 0x5, 0xffffffff, 0x8001, 0x6}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x61f]}, 0x8}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x993, 0x8, 0x58, 0x100000000, 0x83f3, 0x73cc, 0xfffffffffffffffc, 0x7}, &(0x7f00000001c0)={0x100000001, 0x80000001, 0x6, 0xfffffffffffffff9, 0xff, 0x89, 0x40, 0x8}, &(0x7f0000000200)={0x1, 0x5, 0x7, 0x5, 0x7ff, 0xff, 0xd6fb, 0x8}, &(0x7f0000000280)={r1, r2+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x6]}, 0x8}) 21:03:16 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000000c0)) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x100) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:16 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf}, 0xffffff5b) 21:03:16 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa33}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:16 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x7f, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @loopback, 0x40, 0x20, 0x3, 0x667e}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000100)={0x6, 0x1}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000000)={0x8, 0x6, 0x1, 0x9}, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) write$9p(r1, &(0x7f00000000c0)="2a9de994d0e25efb82f552b062c100852a8f3baa42fafa74f81430e8339d029056523294f91df8e27d3707fa12fff0d46c9f0fa13565c7890b68762260ba3ea9ab1c3ee9f935a60bc052f7384b363bb685b54a68b49f3c42212519f01800cec5997810bc8b9c87e1ae9a7658687eafe8b8e138a3f112723e7365fb20e5a1a0fa812a0341afb3b8d6ccc4f51632790e2fbfe851cc9c4a0aadf27882ab5c742e6b25", 0xa1) 21:03:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_pts(0xffffffffffffffff, 0x40c0) 21:03:17 executing program 4: timerfd_gettime(0xffffffffffffffff, &(0x7f0000001000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) write$P9_RMKDIR(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 21:03:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='V\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf2504000000050029000100000008000600", @ANYRES32=0x0, @ANYBLOB="08002c00d286000008002c000000000008003c0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x1, 0x5, 0x40, 0xffffff81, 0x4, "c482ea65ea87c4514db16ab71d274fb6c5789e"}) 21:03:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:17 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_pts(r0, 0x40400) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 21:03:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$TCSBRK(r0, 0x5409, 0x576) 21:03:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x1150c0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x300, 0x70bd28, 0x7fff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x4008080) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 21:03:17 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x300}, 0xffffff5b) 21:03:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x3, 0x3, 0x4, 0x5cfd, 0xb, "c903f590e550438681b2bc74722baef88793e1"}) 21:03:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x20000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x220221, 0x0) write$P9_RAUTH(r2, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x10, 0x1, 0x7}}, 0x14) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x0, 0x400}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:18 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x1, 0x81, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x34}, 0x8000, 0x707, 0x5, 0xff}}) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x6}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 21:03:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x800, 0x1004, 0x4, 0x0, 0x2}}) 21:03:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r2, 0x29, 0x81, 0x4, 0x2, 0x8, @private1, @mcast1, 0x20, 0x7, 0x101, 0xffffffff}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1400, 0x0, 0x4, 0x1b}}) 21:03:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x500}, 0xffffff5b) 21:03:19 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x141}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400d4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x154, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0xe80d167dc668206d}, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:19 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1000, 0x40, 0x8, 0x1}}) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x9) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000001c0)=""/249) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000140)="2b99804ad57fad0d2e6f41abddb3011e1e09fce948cc33b95ea84a44a1a683e8e188ba64bb730a4873505477a25306d87cea9a9beab3f6de07abd6a039a7a03170efcd4e621da8f7edda") 21:03:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x4, 0x0, 0x3}}, 0x14) 21:03:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1002}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 21:03:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x6, 0x3ff, 0x7fffffff, 0xa, "7216c403147331e4aa33dd6056369900fb3e88"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x0, 0x101, 0x40000ff, 0x5, 0xb, "45a8c772f3d061c632f352f2560000f8759284"}) 21:03:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000000c0)="b59249791b435c9c3ee523226416698f2a27e064a3df93406182d88dc60fa40a27f9b346e1021a2a0734c0c627c8daf9ee9fada678b3d595c9f8069b5ddeca2121f8a994572591c07e090eecfce8d166272bb0ec9d34ca0a2f3bb9bbcef843076436ccd075bfde121c6d33899e3efb676ab8783a4110376776f0659203867bc7558ed18a54955b5f832d371ed487c7d91884d8cd721893a0134375251c1e1f1247c5") socketpair(0x15, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f00000003c0)="206253487c71a96981531c5cee16a2c286cda4fbd3d70bcc652b4119757e90897571be191171c7a3aca0d5c9c85a38b0cf723895759fcb61e81035164b4e9a8a4b69634aab8502e21d3bc3279a08e4c62593998c3268ade65c54a37e80590bb3214881d080e96507391278a9e23e06d21dbd2093e8b76bedff52a7e211f57ae1e6b09c0c536aa599f3550bc4204c430ed3953720d263a269d581126c8eeb010963412f6deb812613aa130824e954984561d740817e672669168a47ecff5149b7a8aeda177ba36b00a7da26333d79e2441992d7ac3978f84f4bc961416ec2c6f2b7863dd1112aae1f3b1666ff3d59be386fa842ffb0d452d4c7b616625ae1f2996dc2ce0bd86021467818affd508eddc4e826ac87773c1ec6722a5b9e58940fa490b746b685969197d715258546326d", 0x12f, 0x24004840, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 21:03:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x52901, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/86) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) 21:03:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x600}, 0xffffff5b) 21:03:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1100, 0x0, 0x0, 0x2}}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) socketpair(0x0, 0x5, 0x3, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x8014) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xffffffff, 0x0, 0x101, 0x400006, 0x7, "8fa1ad8881651c74faf3f995fd1f1605c75279"}) 21:03:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x38, 0x3, 0x7f, 0x7fff, 0x3}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/17) 21:03:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) 21:03:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x0, 0x9, 0x1, 0x9, 0x9, "632ad3a69ae6e54a29e7971dc9fd34779113e0"}) 21:03:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/159) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:20 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r3, 0x4, 0x20, 0x87, 0x9f, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x700, 0x8000, 0x4, 0x1}}) 21:03:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x4}}) 21:03:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x4b33, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_dev$tty1(0xc, 0x4, 0x4) 21:03:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x700}, 0xffffff5b) 21:03:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x1f}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5ce33af1f7f9603e7acac577020000000000000057ce58", @ANYRES16=r3, @ANYBLOB="08002dbd7000fcdbdf250d000000080032003f00000008002b000002000008000b00040000000800320006000000050035000700000005002e00000000000500370001000000050029000100000008003a0000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 21:03:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:21 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x100, 0x121c03) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x1000, 0x1, 0x4000}}) 21:03:21 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffff7) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="c6a26d0736e3c3ec0c360216d839e537fd4f0f665217f7540ca711e25cf68c0e0775c8981a464227e317dc471ed642592450eabaa554a63164c9c7343cec68834a7f04ac5b5481195df9c3255177eb53242d8d12ca44fd8d80745f895961c7c63f5073636c6208d49a27ac92e62e90e637e3774aa85e8eb3f6e251e945db4e12ee6691495394633388b361fc807847f63dcf6005b5bfd30c9938d92dcf59dc5e0cb567eeb74b373e3d69e6b63ab52bdb75920c49d4c11f83b24d3f138d066082f33d2e9118f76f33b31683d6") r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xaa1, 0x1f, 0xca, 0x1ff, 0xa, "710f6783000000000000040100"}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x2, 0xa, "01fb224644ea7a353fd076d6f3dafa269cfb26"}) 21:03:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x20, 0x1ff, 0x4d, 0x13, "d988e35af461c70a1e3ef20fe4a2a87b7f1155"}) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8851}, 0x20000000) 21:03:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x400, 0x4) 21:03:21 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSBRK(r1, 0x5409, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x4}}) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x81, 0x3, 0x2}}, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0021) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) 21:03:21 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x900}, 0xffffff5b) 21:03:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8e9, 0x27f, 0x6, 0x0, 0x10}}) 21:03:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x164, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x80, 0x1000, 0x0, 0x9, 0x1}}) 21:03:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) 21:03:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x20, 0x1ff, 0x4d, 0x13, "d988e35af461c70a1e3ef20fe4a2a87b7f1155"}) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8851}, 0x20000000) 21:03:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) 21:03:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_dev$tty1(0xc, 0x4, 0x3) 21:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffff7) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="c6a26d0736e3c3ec0c360216d839e537fd4f0f665217f7540ca711e25cf68c0e0775c8981a464227e317dc471ed642592450eabaa554a63164c9c7343cec68834a7f04ac5b5481195df9c3255177eb53242d8d12ca44fd8d80745f895961c7c63f5073636c6208d49a27ac92e62e90e637e3774aa85e8eb3f6e251e945db4e12ee6691495394633388b361fc807847f63dcf6005b5bfd30c9938d92dcf59dc5e0cb567eeb74b373e3d69e6b63ab52bdb75920c49d4c11f83b24d3f138d066082f33d2e9118f76f33b31683d6") r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0xaa1, 0x1f, 0xca, 0x1ff, 0xa, "710f6783000000000000040100"}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x3, 0xffffffff, 0x2, 0xa, "01fb224644ea7a353fd076d6f3dafa269cfb26"}) 21:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xa00}, 0xffffff5b) 21:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x6, 0x3ff, 0x7fffffff, 0xa, "7216c403147331e4aa33dd6056369900fb3e88"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x0, 0x101, 0x40000ff, 0x5, 0xb, "45a8c772f3d061c632f352f2560000f8759284"}) 21:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000640)="e5fcd33b6437f6505b1203e27440d4df55d42a825df8376c084bf23e84dffe64765d39818c6a230a0c3ba9ca246b23584536d5b695e2f4f03d97d85252f36854d37382417fcf7258f778759c6fd966a0d5ade30886d9814be145c83cc1f7193c365e1d65569dae64a04f932a11dd20c5bb22323e77b2e9844a35ab1f8271b972", 0x80, 0x4000000, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x1a, 0x80000, 0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a277a3b}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5b9d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x123484a06917a01d}, 0x800) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf251200000005012d000100000008000b00050000000500290000000000050030000000000008000600", @ANYRES32=0x0, @ANYBLOB="0500350007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x200902, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r3) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x596ae7a101dda821}, 0x184) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x230, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb5}, {0x6, 0x16, 0x800}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6e5bc000}, {0x6, 0x16, 0x1}, {0x5}, {0x6}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x737}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9471}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7}}]}, 0x230}, 0x1, 0x0, 0x0, 0x8080}, 0x20004001) ioctl$KDSETLED(r0, 0x4b32, 0x2) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:03:22 executing program 1: socketpair(0x5, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:22 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 21:03:22 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x80, 0x2}}, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl$KDSETLED(r1, 0x4b32, 0x401) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) 21:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x6, 0x3ff, 0x7fffffff, 0xa, "7216c403147331e4aa33dd6056369900fb3e88"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x0, 0x101, 0x40000ff, 0x5, 0xb, "45a8c772f3d061c632f352f2560000f8759284"}) 21:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = timerfd_create(0x8, 0x80800) timerfd_gettime(r1, &(0x7f0000000000)) 21:03:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x600) 21:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x6, 0x3ff, 0x7fffffff, 0xa, "7216c403147331e4aa33dd6056369900fb3e88"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x0, 0x101, 0x40000ff, 0x5, 0xb, "45a8c772f3d061c632f352f2560000f8759284"}) 21:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$9p(0xffffffffffffffff, &(0x7f0000000100)="00c8883149f6a5b0190ad06aaf41baaf4500e63af35b03f9df2ddb41a0", 0x1d) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x1}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x238, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) getpeername$unix(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r2) 21:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xb00}, 0xffffff5b) 21:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_dev$tty20(0xc, 0x4, 0x1) 21:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x6, 0x3ff, 0x7fffffff, 0xa, "7216c403147331e4aa33dd6056369900fb3e88"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) 21:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8000, 0x1000, 0xfffc, 0x80, 0xf}}) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) 21:03:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:23 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 21:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="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") ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:23 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCCBRK(r0, 0x5428) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x83f, 0x250001) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000080)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200c0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) write$P9_RMKDIR(r4, 0x0, 0x0) 21:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x6, 0x3ff, 0x7fffffff, 0xa, "7216c403147331e4aa33dd6056369900fb3e88"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_pts(r0, 0x4c0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 21:03:23 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x6, 0x6, 0x3ff, 0x7fffffff, 0xa, "7216c403147331e4aa33dd6056369900fb3e88"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc00}, 0xffffff5b) 21:03:24 executing program 1: r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040890}, 0x40000) getsockname$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x401}, 0x6e) get_thread_area(&(0x7f0000000200)={0x4, 0x0, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x3f}}) 21:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88000}, 0x8804) 21:03:24 executing program 4: getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000000), 0x84800) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:24 executing program 0: write$9p(0xffffffffffffffff, &(0x7f00000000c0)="cb37be2ae710d810003d8a015cff6f64cc28196631115d0a7aee589ec759a668df4a65f9869f1c059a18139a34bcb66493acb4598c0ef529ab17e2fb86d489102b99675c0ed7c327f508a4636870edcfe9436c85318d5568515d1191b954f60a39ca20ea35dc84c24c26df678db13524ae265c022b733633cb101412a262c7d7d19093e5753057e3f6ad407b218eb15826f4cf7228711d4841130f801bd161bdc46f3c064083fd197b6d2dcea7811e3b644ad741862881cc7537e2b2344a83e42069d20e6eb605f2837d3d7fd692f46c0609f9121f5f61afcb4186c36016ee346ab68002a687247bca06e84f2ddbd8bc43ebf5b5af", 0xf5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0xf}}) 21:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x200, 0x0, 0x0, 0x3}}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/56) 21:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x4044010) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 21:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffff) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x400) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000001c0)=""/201) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000040)={0x74, 0x20, 0xd4, 0x3, 0x13, "3314b0bc4b316dd57b4b31dac627608733565d"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x911c, 0x9, 0x29f7, 0x1800, 0xe, "84895e4f47d9ddac64b38e315ecf6ce0d86957"}) 21:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xd00}, 0xffffff5b) 21:03:25 executing program 0: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:25 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x771, 0x7f, 0x5, 0x8000, 0x4, 0xffff, 0xfff, 0x1}, &(0x7f0000000040)={0xfffffffffffffff8, 0x5, 0x2d80000000000000, 0x5c4, 0x1f, 0x9, 0x2, 0x9}, &(0x7f00000000c0)={0x20000000000000, 0x4, 0x4, 0x525c, 0x0, 0xfff, 0x4, 0x1}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xce]}, 0x8}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x7a0f, 0x7fc, 0x0, 0x4}}) 21:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 21:03:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0xae2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000040)={0x0, 0x5, 0x918, 0x0, 0x6}) 21:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x31}}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:03:25 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xe2d00, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8001) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x7}}) ioctl$TIOCCBRK(r0, 0x5428) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) getpeername$unix(r2, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) 21:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0xfffc}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x3ff}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000804}, 0x814) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_FLAGS={0x8}]}, 0x38}}, 0x4000044) 21:03:25 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe00}, 0xffffff5b) 21:03:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/236) 21:03:26 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 21:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x101882) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13df5937bda476d3}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="29b9c0e180b6b5562188e5e07e3fb588508003b9a68ffc391397001069299eca99b951b647ef48483eace35bddc7c0d300d2aacaefebc3c00d69dd39ee86f8dbf234c050c0cfd05fcb972dabe4f50ecdfbac52bdda7441466166c1e6fe0ab1455f7ecf697f4e1fe15aedce99c7d57d5deabde5c01030dce9e7258d729dea8fc998c1d7184fba65d1d82522a90a8e4db00118f14d3a653e323c3ee41223a6cf67660fc52b8215a60279d42354c8", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250700000008002b00010000000a000900000000000000000005002d00010000000500370001000000050037000100000008003200ed00000005002e00000000000a000900aaaaaaaaaabb0000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x90) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:26 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsn(&(0x7f0000000000), 0x100, 0x153080) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x141800, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0xfe01}}) 21:03:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf00}, 0xffffff5b) 21:03:27 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xf2, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x7, 0x0, 0x400, 0x0, 0x7, "b585afe397cff6a4812843b01ae55b181ce586"}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x101}}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/76) 21:03:27 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fff, 0x8, 0x8d, 0x101, 0x4, "6c9878c1c88019df35218533669310cf00cb26"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:27 executing program 1: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) syz_open_pts(r0, 0x0) 21:03:27 executing program 0: r0 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)=']\x00', 0xfffffffffffffffe) keyctl$negate(0xd, 0x0, 0x6, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='#\x89\x00', r2) keyctl$negate(0xd, r0, 0x5, r2) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x19, 0x8, 0xf0, &(0x7f00000002c0)="599a1ab8ff00876fe83c71150fb1324567ded520c403c6292f2d13373a34cf9186416f0369cdf5f6a18cd1e9cc89d83883d1f501ff0a3c364b075748609c89b1a30f5741884258e93f0c471ad53a61e3999532b6096d19522761b56999c3b1eb50c3dbc3a23668f152a9e6148465a366d31b643c25c93577181980fa59b1e7bd8f4cc8272453b1e323df8d7ccb3d1abdcbdc2ddc2ec250014cba1389ee6fd725397faf976c4dd5d8cd44dccbbf61cfe5dd8c5661aa2812b7120b41eb6bd77774ca59794f96c06c826f3fd9393c923fab5a8d931261022734789bb2fc2d6b78aba5a3ea6abe5cd29eb32c7c8b685702e34f2fe7695f617d8b64644787a4ca68e1b40dad39a445ded25bfdd3d5ca01bd75ef430ed0cac7352a301d459d4e1eb6841694f9c9264079f50723028d8e0fd04e40dc2c8e21eac25cc0244cc03f8990d431bb6aac0bd7e104b43fb0a93e4839b07116cbff1889c2d20ecfa9bb053d3bf0db9f2eaac808299d3167008da8960660c83d7ceeda01e15423a05975485fbef66410341d5fe11c2728a942a7d76e1598be71d7f17a1303b43f602a56e0602ca2e05c676893380d622a65fb662f9fc9c9c89daa18d63ce07050ba9fcc9c9b2095f00fbd88749a8723170bdce6a33a37c20a2e26623a71559802b418289b66bc116ac9811796aa7d04855c40acddd319ae23c61a416e2236e39b04631610a41da3b8118c1186be157aa4fe5c060f74c636c4567f0331f5c21a44345e9cab782fd73788a429be2a9e170dc1128e16a8629dd08b13afaa76003b8ddee632ae192e07f599013f302b3c00c661608f0bf51f497d7fc851d2a08588b918a9327a5d03924a8bcecb009ff9aa0e7fe5b96c3782a3cfb1bff3ad8e3258cb459f3bc278288ca23840e5bccff782e0f58925fe209841c85a1234279b18672e7ff1a243611fb8a715b35f33d3fd42c1867a00914143c638121371d5ad8a34c3dfce9529e08a1a8da3604d4e3e2d321937ce24323f02f4b1544ce251aa12a03c980536978af7c60ed2564bb6eb5579788f31e466b62388ee98a6b0d9e6acc9bf99e52e1cb4f9532dd35d878f44fa042877cf2377df89fb300e73363999752786e6e9c7dd86e990903da615c39e78315a1d6e9b2fea248965ca9a052ce55e17b3bfbe3ffa8f530740bbf5d20c7d15b3670a694f8ab0fc7d37dd0360a1adb7a1640de8055a73d7d4562ab86d96b072e1858ced733338d2f2d6585c999335c929c8541d34d723bb9937c87ae53427843a7cced22d4b92c76969cec661cf7f2cb8a72cb6c8af8ef4cafc33071d0c09a0cca6df2830eb7d1190cf7315cbe9f6a50b126b427f3ecc321f6567bcdb7aff4bbc9cc46d772c304152570a923b4e2f9351d272ac1683f0366604e672acc46dd13a4a7f3fdda4ad22b538e5c4d15eb9a094d9a3e61144935904"}) 21:03:27 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = mq_open(&(0x7f00000000c0)='{(-\x00L\x82q\xb25\xf7\x97\x98w\xf5\x7f\xfd\xe9Gs?\x1a\x91_\x87+\xd2wX\xb0\x85\x9b\xa9\x13\xbc\xe8v%\x87`\xc8l4\x9ea\x19\x89\x14g\xd6\xe5\xd7\xc2\xa5\x0f<\x8fj `\xab\xeb\x91\xad(\xed\x0f\x8fz\x9f\x8a\x96\x8c|\x1a\x9d\xec\xfc\xad\xa2!`#\x1bC\xf76\x80\x9d\x00=\x99\x1d\x8ar\xfa\x7fx\xd4\xc6va\x9f\xe6A\x97O>(~\xb0\x8e\x15\x15\x19\x90i\xc8\x91{\x03\xcf\xe4:;\x93%U\xd8m\x9dP\x84\xd1N-\xaf`#\xb4\x96z\xd9\xf8\xb7\x8e\xa8+NA\x11K\xf9\xa2\xf2\x11\x87\t\xc5~=Q\x83{.!\xd1\x9b\xe3\xc8l\xc7\x8a++\t\xd5\xb4K\x82\v\xf4\x11g6\x94H!\"v\r\x13\x12a\x01\xaa\xea\xeaX\x01\xbd\x98Cwu\x18\xaaO\xa4\xb4\xee\x06\x06\xbb\xe3\x84\x942\xa8o=IB \v%v\xbe8C\xcdx\xde\xb8K\xfbI!p\xb2\x04+\x88vK3i\xa36\xe4\xe8\x92\xcd\x1e\x98\xfb\xf6\xb7\xc1?r\xfd{\x1b\x90\xba\xb6\x02\xd1\xf4\x82\xdb\xce \xf1\xd3zM\xa4j\xb7\xe8XF\xc5\xdf\xc8\x80u\x1f#\x10\xa0,\x82\xd7%43$\xc7\xe2\ny~\xceu08\xa5(\xea\x03\b\xe1g\xa8\xf6', 0x2, 0x80, &(0x7f0000000040)={0x1000, 0x1, 0x5, 0x10001}) write$P9_RMKDIR(r0, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000080)={0x6, 0x7a, 0x415e}, 0x0) 21:03:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x1}}) 21:03:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1800}, 0xffffff5b) 21:03:28 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/115) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x8f, 0x40, 0x3, 0x9, 0x19, "e9e474f46c9b13143e77ce5bfc63f44260b0b7"}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x5, 0x7, 0xcda4, 0x7f, 0x2}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) 21:03:28 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x200440c0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000240)={0x7, 0x4b, 0x1}, 0x7) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x5, 0x3, 0x100, 0x3}}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x44088) 21:03:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x6, 0xffc, 0x0, 0xab4c, 0x1}}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x1, 0x3}) 21:03:28 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x90800) r5 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3ff, 0x48000) ioctl$LOOP_CLR_FD(r5, 0x4c01) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xd4, 0x7, 0x1ff, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x700, 0x8, 0x7f}}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000426bd7000fedbdf2402000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6ace}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x824) 21:03:28 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/35) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1a00}, 0xffffff5b) 21:03:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:28 executing program 1: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf17}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048080}, 0x80) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:28 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) syz_open_pts(0xffffffffffffffff, 0x101000) 21:03:28 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x4004444) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000040)=""/175) write$P9_RMKDIR(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r3) syz_open_dev$vcsn(&(0x7f0000000200), 0xfffffffffffffffd, 0x101080) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20000011) 21:03:29 executing program 0: socketpair(0x21, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:29 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x5d, &(0x7f00000000c0)=""/93}, &(0x7f0000000140)="2e273d60d516", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:29 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x200, 0x40881) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x20, 0x54a000) write$P9_RMKDIR(r1, 0x0, 0x4f) 21:03:29 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1b00}, 0xffffff5b) 21:03:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:29 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:03:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="52f98bba53e2557c64aa0839ec40267baf4699d56afdc1eeb3ebe5fb3d86ea4309dc55f7897b6b212f1fce5bd356b029d95de86ef9b26016867822474b13ba877f8b5cea0e7441098c3ef9c79322c62a70ad35f72e6a8633") 21:03:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x29, 0x2, {0x1, [{{0x20, 0x3, 0x6}, 0x1, 0xbd, 0x7, './file0'}]}}, 0x2a) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x800) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) accept$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) write$P9_RREADDIR(r1, &(0x7f0000000100)={0x68, 0x29, 0x2, {0x4c4d, [{{0x2, 0x2, 0x7}, 0x7, 0x6, 0x7, './file0'}, {{0x40, 0x2, 0x5}, 0x0, 0x3f, 0x7, './file0'}, {{0x0, 0x2, 0x2}, 0xc797, 0x0, 0x7, './file0'}]}}, 0x68) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RXATTRCREATE(r3, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 21:03:29 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100, 0x1000}}) 21:03:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:29 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x101}, 0xb) 21:03:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) socketpair(0xa, 0x2, 0x3a, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) timerfd_create(0x1, 0x80800) 21:03:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x3f00}, 0xffffff5b) 21:03:30 executing program 1: getegid() ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x3ff, 0x9, 0x3f, 0x2}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x12, 0x0, 0x20, 0x3}}) 21:03:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x6, 0x0, 0x3}}) 21:03:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:30 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_RMKDIR(r0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000000)="daae79bace3820a3441a1aa9a6e53c731811390d2837d26e3fb6ec071519bd7d37cec33466b750fdeade7807cbfb32399bc57a03ef9e9758c2aa18946f8adae3bc71045b9331a38389af4ee67f769e7ac8590187a66e9cb723ef90f71b04e29308087d4d2202", 0x66) 21:03:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x1b, 0x1f, 0xd4, &(0x7f00000000c0)="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"}) 21:03:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100}}) 21:03:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x9) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:30 executing program 4: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="9ca3cad2fdd43b7d70381a5d2d5412d7103052171ccf8fa8cad2f14613c95360e325b2e1fbe8614e53fe1c176d") write$P9_RMKDIR(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 21:03:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0x10}}) 21:03:31 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x5, 0x1000, 0x0, 0x20}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="69d176a060694277adcfbebf1d1866a1e2c0be0ca5989067b21211a2b59f0a4a5388758fe5c914d7bd30938ae441fe87073257342ba9cadf3be18465279fbf9c6a6d7723573b01e011f77d2039aac5d2f36f4075d49e4cf429cfcb23740362ac45aa98cac69c57d5645963919f72ff5c35fae03274070ac32eb2b0615cde333a7c199b57544b31c6eb0b47d160f386b9f78fbb22d883381ccca5c48352df31f002019af3981d4125529cef04b5215004") 21:03:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, 0x0, 0x218, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x20048001) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x3}, 0xf) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r3, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x2f, 0x2, 0xff, 0x6e, 0x2, @loopback, @empty, 0x7800, 0x8000, 0x7, 0xd1f}}) 21:03:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x100}}) 21:03:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x3f00}, 0xffffff5b) 21:03:31 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x3, 0x0, 0x5cbca2b0100ff921, @mcast2, @private1, 0x0, 0x8000, 0x100009, 0x4}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51a0}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004041}, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x200, 0xb6, 0xffff, 0x3}}) 21:03:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe0}, 0xffffff5b) 21:03:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:32 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/3) 21:03:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="21fb5c0d13b665ca18e358d249ad92c868bebaab71b6ace5ef220a6ac0ad4b7ffa856454c426d50a88c54df117046278e116ea14118affe7e5ab13c9e28fa919b0b47e2e89aa11d1ae43797afcb3f201596aceae6e10add8b488d9f647a8d8ac25789a7c3973d45c8863439a013fbe376b4fd28156d4286a02a19ed8fdf6c788b2937cf2048009c237df8961c6b50a5e639b3d32430ef3939b81f05a4fa036cb83e908d4de888a325aff7b8ee031ea1e8db32725fda8a7d0f14e13fc352f15a7813904ec8710d2") 21:03:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x16, 0x14, "1736a319b1f8e3d323535f93ade15822c85203e88fa8c99ba6b947a82dba590e5cf0df5e9b0b0cdba6a897d1217eb1eb3dcd56613590fd1505ee6997893d8b89", "660f1e6cafaa6b7ca3520f64bf020ad7bce88de62fbb00047487ab3c20272d37", [0xff, 0x7fffffff]}) 21:03:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x80000001, 0x10001, 0xde, 0x0, 0x12, "89764a3ffbb0a4d32e9b9dbce3c6b10ad9b9d1"}) 21:03:32 executing program 1: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='#\x89\x00', r1) keyctl$get_persistent(0x16, r0, r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:32 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000880) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000000c0)='!\x89\x00Y\x9c\x8ak\xb7\x87A\xf2/\x97\x82Wl\xdc1Q\x83\xbc~\xfb@\x06\xa6\x83\xb5pl\xfcc\xf5\xe7\xc5b\x90`\xd5\x0f\x0e\xcf\x95\xe2\xf7\x9c$\x1bX\xf8g\xe26e\xb9\xf5\xa1\xdes\xd8\xec\xda\xf0R*\xe2', r0) r1 = syz_open_pts(0xffffffffffffffff, 0x244000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x6, 0xfff, 0x7, 0xbee2, 0x2}}) keyctl$link(0x8, r0, 0xfffffffffffffffe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x4000}}) 21:03:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xe000}, 0xffffff5b) 21:03:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x7, 0xffff, 0x3, 0xb997, 0x2, "c45e9c7e7954b7a21f1cb2bd64ced90903aafb"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_pts(r2, 0x40000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:33 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xd) 21:03:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x1000, 0x0, 0x0, 0xf}}) 21:03:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigreturn() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) syz_open_pts(r2, 0xc0080) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x0, 0xe, 0x132, &(0x7f00000000c0)="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"}) 21:03:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x8, 0x4, 0x8, 0x1}}) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf000}, 0xffffff5b) 21:03:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x180a}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4090) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x100, 0x3, 0x8, 0x9, "2f30a9bf99fdb3634ef60d4ca839511a2f1342"}) 21:03:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x11, 0x12, 0x160, &(0x7f00000000c0)="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"}) 21:03:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:34 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1014, 0x12, 0x0, 0x4}}) 21:03:34 executing program 0: ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1f, 0x0, 0x0, 0x3}}) 21:03:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r1, 0x0, 0x0) 21:03:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0xfff}}) 21:03:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:35 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400080, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0xd69f0705a01120b5, 0x70bd26, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x810) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x6, 0xb9, 0x81, 0x4}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:35 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 21:03:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x1, 0xff}) 21:03:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:35 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:35 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:35 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1000}}) 21:03:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/43) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:36 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:36 executing program 5: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xe7b2) 21:03:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0xffffffff, 0x2, 0x5}, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x4b33, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, "ca3bbc9c447071c7426c0e2a18f561922d4250"}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:03:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0xfffd}}) 21:03:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 21:03:36 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xffff}, 0xffffff5b) 21:03:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x38) 21:03:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x280000) r3 = syz_open_pts(r1, 0x40) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000000)={0x6, 0x4}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xdd, 0x0, 0x0, 0xffff}}) 21:03:36 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x717, 0x8000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x3, 0x3, 0x8, 0xffffffff, 0x4, "8f1d39f678a8b71ad0cde3857d5d7ed9b808e5"}) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:36 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x200}}) 21:03:36 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0xc044081) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/179) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0xffff, 0x5, 0xf}}) ioctl$KDSETLED(r1, 0x4b32, 0x8) 21:03:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:37 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x200}}) 21:03:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:37 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x0, 0xcc, 0x1a, @private2, @local, 0x7820, 0x8, 0x1, 0x20}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r4, 0x4, 0x10, 0x0, 0x8, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x80, 0x7, 0x101, 0x8001}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000300)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', r7, 0x4, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r7, 0x0, 0x9, 0x3, 0x9f7, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x80, 0x1, 0x8, 0x8}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:37 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 21:03:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = mq_open(&(0x7f0000000000)='}\\\xa7%\x00', 0x40, 0xa5, &(0x7f0000000040)={0x7, 0x9, 0x7}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) mq_timedreceive(r1, &(0x7f00000000c0)=""/147, 0x93, 0x2, &(0x7f00000001c0)={r2, r3+60000000}) 21:03:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x3, 0x9, 0x20, @loopback, @private2, 0x7808, 0x700, 0x6, 0x1}}) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:37 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x7f00}, 0xffffff5b) 21:03:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) 21:03:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='#\x89\x00', r2) keyctl$get_persistent(0x16, r1, r2) 21:03:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:03:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x2}}, 0xffffff5b) 21:03:38 executing program 1: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x0, 0x0, 0x7}}, 0x14) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x20, 0x8, 0x2, 0xb115, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x4, 0x0, 0x0, 0xfffffffa, 0x8, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x95b8af81dfc84700, 0x20, 0x1, 0x7}}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) 21:03:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:03:38 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x401) write$P9_RMKDIR(r0, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 21:03:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)) 21:03:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1002, 0xfffe}}) 21:03:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/61) 21:03:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:38 executing program 0: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x8, 0x3, 0x8}}, 0x3e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/2) 21:03:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x7}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/38, 0x26, 0x1, &(0x7f0000000100)={r1, r2+60000000}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x3}}, 0xffffff5b) 21:03:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1002}}) 21:03:39 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fedbdf250700000008003a0000020000"], 0x1c}, 0x1, 0x0, 0x0, 0xeac3ed9803a73541}, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffff801}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x88080400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x134, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40800}, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80c) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x68}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x5) 21:03:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x4000, 0xfff, 0x3}}) 21:03:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:39 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x2, 0xcdb2, 0x0, 0x0, 0x11}}) 21:03:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x80}}) 21:03:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x48000000000) 21:03:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x4}}, 0xffffff5b) 21:03:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x10001, 0x3}) 21:03:40 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 21:03:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x2400) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/236) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0xfff7, 0x4083, 0x0, 0x1}}) 21:03:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="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") pipe2$9p(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRWALK(r2, &(0x7f0000001040)={0xf, 0x1f, 0x1, 0x401}, 0xf) 21:03:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000, 0x0, 0x0, 0xf}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x81, 0x7fffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x5) 21:03:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x2f, 0x76, 0x1, 0x7c3d, 0x8, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x100, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x6, 0x1, 0x2, 0x8ee, 0x44, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0xa1ffb0e2fcabe9b, 0x101, 0xc7a8}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x0) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff}, 0x104800) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000140)={0x6, 0x4}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, 0x0, 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRWALK(r8, &(0x7f0000000500)={0xf, 0x1f, 0x2, 0xa2}, 0xf) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x2}) 21:03:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x5}}, 0xffffff5b) 21:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x300}, 0xffffff5b) 21:03:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:41 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:41 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:41 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x6}}, 0xffffff5b) 21:03:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:42 executing program 1: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:42 executing program 1: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:42 executing program 1: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:42 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:42 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:42 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc00}, 0xffffff5b) 21:03:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x7}}, 0xffffff5b) 21:03:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:43 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:43 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:43 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xf800}, 0xffffff5b) 21:03:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:43 executing program 0: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:43 executing program 0: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:43 executing program 0: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x8}}, 0xffffff5b) 21:03:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xc000}, 0xffffff5b) 21:03:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x9}}, 0xffffff5b) 21:03:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:44 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:44 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:44 executing program 4: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xa}}, 0xffffff5b) 21:03:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:45 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:45 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:45 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:45 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:45 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:45 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x180}, 0xffffff5b) 21:03:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xb}}, 0xffffff5b) 21:03:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:46 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:46 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:46 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0xfc}, 0xffffff5b) 21:03:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xc}}, 0xffffff5b) 21:03:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x7}}, 0xffffff5b) 21:03:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xd}}, 0xffffff5b) 21:03:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf0}, 0xffffff5b) 21:03:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x7}}, 0xffffff5b) 21:03:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40095}, 0x80) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xe}}, 0xffffff5b) 21:03:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40095}, 0x80) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40095}, 0x80) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) 21:03:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40095}, 0x80) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0xf0}, 0xffffff5b) 21:03:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x7}}, 0xffffff5b) 21:03:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xf}}, 0xffffff5b) 21:03:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x1000}}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/84) 21:03:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="f34827f24ec1e7eacf2ffa61f2e018757cb0995daac473e6e04155d49e379a5082494473db8b3be8c0e115f9943a0760ca7e83cda9577ffde76c334c8afbe52984887fc68fa4fb53fed1039c03b8811c3f20a44fbd2eb18dc79c80219c85f6e23e0b19c45ec107fa4d50b43e42209dac50e68bc47212af471fab6df4144259") ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1001, 0x1, 0x0, 0x2}}) 21:03:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) 21:03:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x9}, 0xffffff5b) 21:03:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x18}}, 0xffffff5b) 21:03:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) 21:03:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) 21:03:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 21:03:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x9}, 0xffffff5b) 21:03:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 21:03:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) 21:03:51 executing program 4: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 21:03:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:03:51 executing program 4: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2000, 0x1000}}) 21:03:51 executing program 4: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x9}, 0xffffff5b) 21:03:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1b}}, 0xffffff5b) 21:03:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) [ 2590.780030][ T2907] ================================================================== [ 2590.780053][ T2907] BUG: KCSAN: data-race in __process_echoes / n_tty_write [ 2590.780072][ T2907] [ 2590.780077][ T2907] write to 0xffffc90006703278 of 8 bytes by task 2900 on cpu 1: [ 2590.780093][ T2907] __process_echoes+0x607/0x660 [ 2590.780113][ T2907] n_tty_receive_buf_common+0x4c38/0x4e70 [ 2590.780133][ T2907] n_tty_receive_buf2+0x2e/0x40 [ 2590.820741][ T2907] tty_ldisc_receive_buf+0x5b/0xf0 [ 2590.825862][ T2907] paste_selection+0x215/0x300 [ 2590.825893][ T2907] tioclinux+0xe5/0x450 [ 2590.825910][ T2907] vt_ioctl+0x26e/0x2060 [ 2590.825928][ T2907] tty_ioctl+0xa24/0x1120 [ 2590.825941][ T2907] __se_sys_ioctl+0xcb/0x140 [ 2590.847984][ T2907] __x64_sys_ioctl+0x3f/0x50 [ 2590.852574][ T2907] do_syscall_64+0x3d/0x90 [ 2590.856993][ T2907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2590.857020][ T2907] [ 2590.857026][ T2907] read to 0xffffc90006703278 of 8 bytes by task 2907 on cpu 0: [ 2590.857042][ T2907] n_tty_write+0x147/0xaf0 21:03:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) [ 2590.877153][ T2907] file_tty_write+0x409/0x660 [ 2590.877185][ T2907] tty_write+0x24/0x30 [ 2590.877205][ T2907] vfs_write+0x69d/0x770 [ 2590.877224][ T2907] ksys_write+0xce/0x180 [ 2590.877239][ T2907] __x64_sys_write+0x3e/0x50 [ 2590.877256][ T2907] do_syscall_64+0x3d/0x90 [ 2590.877274][ T2907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2590.877295][ T2907] [ 2590.877298][ T2907] value changed: 0x0000000000003132 -> 0x0000000000003138 [ 2590.877308][ T2907] 21:03:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) [ 2590.877310][ T2907] Reported by Kernel Concurrency Sanitizer on: [ 2590.877316][ T2907] CPU: 0 PID: 2907 Comm: syz-executor.0 Not tainted 5.13.0-syzkaller #0 [ 2590.877335][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2590.877344][ T2907] ================================================================== 21:03:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xc0}}, 0xffffff5b) 21:03:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:54 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xe0}}, 0xffffff5b) 21:03:54 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:54 executing program 2: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:54 executing program 0: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:54 executing program 0: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:54 executing program 0: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xf0}}, 0xffffff5b) 21:03:55 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:55 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:03:55 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:55 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:55 executing program 5: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:55 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x8}, 0xffffff5b) 21:03:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:56 executing program 1: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:03:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xf8}}, 0xffffff5b) 21:03:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:56 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:56 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:56 executing program 1: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:03:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:56 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:56 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:56 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x1a}}, 0xffffff5b) 21:03:56 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 21:03:56 executing program 1: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:03:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xfc}}, 0xffffff5b) 21:03:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 21:03:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:03:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 21:03:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 21:03:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xff}}, 0xffffff5b) 21:03:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) 21:03:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) [ 2596.612095][ T3083] ================================================================== [ 2596.612119][ T3083] BUG: KCSAN: data-race in __process_echoes / n_tty_write [ 2596.612143][ T3083] [ 2596.612149][ T3083] write to 0xffffc9000e54b278 of 8 bytes by task 3054 on cpu 0: [ 2596.637343][ T3083] __process_echoes+0x607/0x660 [ 2596.637368][ T3083] n_tty_receive_buf_common+0x4c38/0x4e70 [ 2596.647921][ T3083] n_tty_receive_buf2+0x2e/0x40 [ 2596.652778][ T3083] tty_ldisc_receive_buf+0x5b/0xf0 [ 2596.657902][ T3083] paste_selection+0x215/0x300 [ 2596.657929][ T3083] tioclinux+0xe5/0x450 [ 2596.666838][ T3083] vt_ioctl+0x26e/0x2060 [ 2596.666864][ T3083] tty_ioctl+0xa24/0x1120 [ 2596.675497][ T3083] __se_sys_ioctl+0xcb/0x140 [ 2596.680098][ T3083] __x64_sys_ioctl+0x3f/0x50 [ 2596.684686][ T3083] do_syscall_64+0x3d/0x90 [ 2596.684708][ T3083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2596.695083][ T3083] [ 2596.695090][ T3083] read to 0xffffc9000e54b278 of 8 bytes by task 3083 on cpu 1: [ 2596.695107][ T3083] n_tty_write+0x147/0xaf0 [ 2596.709331][ T3083] file_tty_write+0x409/0x660 [ 2596.714015][ T3083] tty_write+0x24/0x30 [ 2596.714039][ T3083] vfs_write+0x69d/0x770 [ 2596.714054][ T3083] ksys_write+0xce/0x180 [ 2596.714069][ T3083] __x64_sys_write+0x3e/0x50 [ 2596.714085][ T3083] do_syscall_64+0x3d/0x90 [ 2596.735595][ T3083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2596.741497][ T3083] [ 2596.741503][ T3083] value changed: 0x0000000000003fd0 -> 0x0000000000003fd6 [ 2596.741514][ T3083] [ 2596.741517][ T3083] Reported by Kernel Concurrency Sanitizer on: [ 2596.759342][ T3083] CPU: 1 PID: 3083 Comm: syz-executor.2 Not tainted 5.13.0-syzkaller #0 [ 2596.759366][ T3083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2596.759375][ T3083] ================================================================== 21:03:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:03:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, 0x0, 0x0) 21:03:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:03:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0xa}, 0xffffff5b) [ 2597.882641][ T3118] ================================================================== [ 2597.882666][ T3118] BUG: KCSAN: data-race in n_tty_receive_char / n_tty_write [ 2597.898008][ T3118] [ 2597.898020][ T3118] write to 0xffffc9000e6a1028 of 8 bytes by task 3117 on cpu 0: [ 2597.898036][ T3118] n_tty_receive_char+0x4f8/0x6c0 [ 2597.912986][ T3118] n_tty_receive_buf_common+0xf2e/0x4e70 [ 2597.913016][ T3118] n_tty_receive_buf2+0x2e/0x40 [ 2597.923497][ T3118] tty_ldisc_receive_buf+0x5b/0xf0 [ 2597.923524][ T3118] paste_selection+0x215/0x300 [ 2597.933392][ T3118] tioclinux+0xe5/0x450 [ 2597.933416][ T3118] vt_ioctl+0x26e/0x2060 [ 2597.941892][ T3118] tty_ioctl+0xa24/0x1120 [ 2597.941912][ T3118] __se_sys_ioctl+0xcb/0x140 [ 2597.950879][ T3118] __x64_sys_ioctl+0x3f/0x50 [ 2597.950899][ T3118] do_syscall_64+0x3d/0x90 [ 2597.959883][ T3118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2597.959909][ T3118] [ 2597.959915][ T3118] read to 0xffffc9000e6a1028 of 8 bytes by task 3118 on cpu 1: [ 2597.959930][ T3118] n_tty_write+0x137/0xaf0 [ 2597.959947][ T3118] file_tty_write+0x409/0x660 [ 2597.959970][ T3118] tty_write+0x24/0x30 [ 2597.959992][ T3118] vfs_write+0x69d/0x770 [ 2597.960008][ T3118] ksys_write+0xce/0x180 [ 2597.960023][ T3118] __x64_sys_write+0x3e/0x50 [ 2597.960040][ T3118] do_syscall_64+0x3d/0x90 [ 2597.960058][ T3118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2598.012126][ T3118] [ 2598.012133][ T3118] value changed: 0x0000000000002284 -> 0x000000000000228a [ 2598.012142][ T3118] [ 2598.012145][ T3118] Reported by Kernel Concurrency Sanitizer on: [ 2598.012151][ T3118] CPU: 1 PID: 3118 Comm: syz-executor.5 Not tainted 5.13.0-syzkaller #0 [ 2598.038410][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2598.038425][ T3118] ================================================================== 21:04:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:04:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:04:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x0, 0x2}}, 0xffffff5b) 21:04:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xc0}}, 0xffffff5b) 21:04:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:04:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:04:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) 21:04:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0xc0}}, 0xffffff5b) 21:04:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x0, {0x0, 0x3}}, 0xffffff5b) 21:04:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14}, 0xffffff5b) 21:04:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, 0xfffffffffffffffd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x0) write$P9_RSYMLINK(r3, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x40, 0x4, 0x4}}, 0x14) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="7ae297bbcffc7a79ec55666548e07e0586a32bd7253bba7515fec18bd7115e46e50b01a05456324f14a68d2bd237535ed6b7150491e2debd5e5468e5acce9c32b8cea0") 21:04:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0xe, {0x2, 0x0, 0x1000}}) 21:04:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0)