040), 0x480081, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000080)) 22:06:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (rerun: 64) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="af7d10836fd3af252d7e2aea") (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xe200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x1}}, 0x20) (async) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async, rerun: 32) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x18041, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000001c0)) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x90100, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000240)) (async, rerun: 64) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000140)={0x4, 0x8, 0xfff, 0x8001, 0xa, "99f27c9ef500fea1"}) (async, rerun: 64) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x4020940d, &(0x7f0000000040)=0x2) 22:06:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x2, 0x20, 0x82, &(0x7f0000000040)="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"}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x2, 0x20, 0x82, &(0x7f0000000040)="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"}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 22:06:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="5867b51089e38238f1acc104d41ace9a63db86f492715ecaf00e6c482d87e40dc3c766b64dc682dcfee7a700"/55) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x2, 0x0, 0x101}) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x2, 0x0, 0x101}) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) (async) 22:06:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000000c0)=0x400000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480081, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000080)) 22:06:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x450) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/253) 22:06:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 22:06:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="5867b51089e38238f1acc104d41ace9a63db86f492715ecaf00e6c482d87e40dc3c766b64dc682dcfee7a700"/55) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x2, 0x0, 0x101}) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x2, 0x0, 0x101}) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) (async) 22:06:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000005c0)={0x2, 0x1, 0xa, 0x18, 0x86, &(0x7f00000001c0)="21a4695caf1036153fd4daa1c43efc908d551ff0bbdb9806af22ab73fba69e1ea6a1175a761f38c1e1be0b3bfc62af3b57018f8880fa7e4006cc813614c8778487bfd71c535fabcb0fe6953bd1b9d4baaf171ce615224ce79a8dbeac29820a98eb0f2757417197865b17a418caa60b9bf21ffe9436ab639cf67c5f8a608bd9d7bb119d7c207438d9b4718f53ac654560a5ff959d2caff484ebeb0e452a89070da4f5cb52813b3e03ed771e39aafeef500b7ac3a0d85cd0d99cdd1043fd86a29ab7eac2ebc7f9dd6df9080d0edf968af0d8f55bc47a243bd06ae136e1265549e80ce321de8a9ae56714ddd2c36f0fd9ce9dc5e6f1305064497c14894c7c1810877040df57fe0a2f18d4972afac5e1a5287f7ac257a49dd9b5962dbe9e625823f9c53be6b605ae3380a07c888a511831553f3d92ab04c09f9dd6ab5608d3512e40faaf660d02b58b94b23d1cd2ed0405340a418cdf985e17b10666b2ce519d3ebd9575f6ad7f924fb92fa33ae6c9c55bffa82cd5dcf6c4b186fd8d6980b2c386c9d70c52014bb389def80ce8d4ca60dab9966637cd89c2a242448cedea95804e9e9d7d3001fa6004344979ec7a73dd6c91465297037ebc57aa9de1f1297019403c9a90ca09ae966bcae11e5f363f9442f28bf36bb3275d318423a8dab4657374bbf238f0d5b96b440069a7302df2fe20950f9581c9ee34bafd18c00648904a02d70323985a98db5f49a9308a7e3bcd4e44524b9961e7bca7ab2d361913de6a5af43b50ddccc764002d5885939fb8dffa13df06cffdb63c6967e779a480925e623ce5eaafa8e09a0653e438b012cb62de68f90599bcd6ddc95246156e0334f63c26d8739d3cefcf745785e008770d4e2ecb12b565b1881898fedcda16358d68e302a1bf864bfb2e85934508c866e361ffddcb6694d3fbcaf38fab7a42fc9d42e461796e838a2d348db128dac8bfa4693bfeb5ba64452346489ec2072515fc7e7557a16eaad9751643b3c142fabcd07bb5335c982401b41133624741a8c0c1196cfe0428708b285f37e6f5b2fc871aabd419ba88d51d84adef30eb78ed5bb6f90bc48adbe702052d38a77437f9b0477f9a0e52c7c470b668b4fb26b9738705dd67062e1537615bc42aa0b33b45f8a9685b33e9971557f103346b0e8e67b9f402c706f701e459989ba37e44ba3d138f6c2d0001ccdcdff944e483676d852d2bdbe94fa9d95c98c705f59eea701033e5d91fbba19bcb42dac9840b84447f6bcf3047f407f96b6b60bb98397b6465684dbfbe233f336a8b0c9bcb5c3e9b109bb811a2fa8d31749788875ea6cdc74d3001a277efa2064d1be944e69318dba8195ce226d073ab67e4d872007842fceeefdb587d1d84764aa09d279c40402ac2ac8057458c3fae9a6fb53df02b6e2f1573209bd302643bf5f94dcaa27b72e39d9107694972"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x404040, 0x0) syz_open_pts(r1, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48040) 22:06:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x450) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x450) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x1) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/253) 22:06:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) 22:06:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000005c0)={0x2, 0x1, 0xa, 0x18, 0x86, &(0x7f00000001c0)="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"}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x404040, 0x0) syz_open_pts(r1, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48040) 22:06:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="5867b51089e38238f1acc104d41ace9a63db86f492715ecaf00e6c482d87e40dc3c766b64dc682dcfee7a700"/55) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$FIONREAD(r0, 0x541b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000500)={0x8, 0x101, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'veth0\x00'}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x10001) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1e, 0x11, 0x1c5, &(0x7f0000000080)}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) socketpair(0x18, 0x3, 0x4, &(0x7f0000000980)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000004c0)=0xfffffffa) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x10) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000940)={0x2, 0x605e, 0x10, 0x40000003, 0x1de, &(0x7f0000000540)="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"}) 22:06:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x450) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/253) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x1) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/253) (async) 22:06:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00eb"], 0x17}}, 0x0) socketpair(0x1a, 0xa, 0xe27f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) 22:06:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000005c0)={0x2, 0x1, 0xa, 0x18, 0x86, &(0x7f00000001c0)="21a4695caf1036153fd4daa1c43efc908d551ff0bbdb9806af22ab73fba69e1ea6a1175a761f38c1e1be0b3bfc62af3b57018f8880fa7e4006cc813614c8778487bfd71c535fabcb0fe6953bd1b9d4baaf171ce615224ce79a8dbeac29820a98eb0f2757417197865b17a418caa60b9bf21ffe9436ab639cf67c5f8a608bd9d7bb119d7c207438d9b4718f53ac654560a5ff959d2caff484ebeb0e452a89070da4f5cb52813b3e03ed771e39aafeef500b7ac3a0d85cd0d99cdd1043fd86a29ab7eac2ebc7f9dd6df9080d0edf968af0d8f55bc47a243bd06ae136e1265549e80ce321de8a9ae56714ddd2c36f0fd9ce9dc5e6f1305064497c14894c7c1810877040df57fe0a2f18d4972afac5e1a5287f7ac257a49dd9b5962dbe9e625823f9c53be6b605ae3380a07c888a511831553f3d92ab04c09f9dd6ab5608d3512e40faaf660d02b58b94b23d1cd2ed0405340a418cdf985e17b10666b2ce519d3ebd9575f6ad7f924fb92fa33ae6c9c55bffa82cd5dcf6c4b186fd8d6980b2c386c9d70c52014bb389def80ce8d4ca60dab9966637cd89c2a242448cedea95804e9e9d7d3001fa6004344979ec7a73dd6c91465297037ebc57aa9de1f1297019403c9a90ca09ae966bcae11e5f363f9442f28bf36bb3275d318423a8dab4657374bbf238f0d5b96b440069a7302df2fe20950f9581c9ee34bafd18c00648904a02d70323985a98db5f49a9308a7e3bcd4e44524b9961e7bca7ab2d361913de6a5af43b50ddccc764002d5885939fb8dffa13df06cffdb63c6967e779a480925e623ce5eaafa8e09a0653e438b012cb62de68f90599bcd6ddc95246156e0334f63c26d8739d3cefcf745785e008770d4e2ecb12b565b1881898fedcda16358d68e302a1bf864bfb2e85934508c866e361ffddcb6694d3fbcaf38fab7a42fc9d42e461796e838a2d348db128dac8bfa4693bfeb5ba64452346489ec2072515fc7e7557a16eaad9751643b3c142fabcd07bb5335c982401b41133624741a8c0c1196cfe0428708b285f37e6f5b2fc871aabd419ba88d51d84adef30eb78ed5bb6f90bc48adbe702052d38a77437f9b0477f9a0e52c7c470b668b4fb26b9738705dd67062e1537615bc42aa0b33b45f8a9685b33e9971557f103346b0e8e67b9f402c706f701e459989ba37e44ba3d138f6c2d0001ccdcdff944e483676d852d2bdbe94fa9d95c98c705f59eea701033e5d91fbba19bcb42dac9840b84447f6bcf3047f407f96b6b60bb98397b6465684dbfbe233f336a8b0c9bcb5c3e9b109bb811a2fa8d31749788875ea6cdc74d3001a277efa2064d1be944e69318dba8195ce226d073ab67e4d872007842fceeefdb587d1d84764aa09d279c40402ac2ac8057458c3fae9a6fb53df02b6e2f1573209bd302643bf5f94dcaa27b72e39d9107694972"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x404040, 0x0) syz_open_pts(r1, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48040) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000005c0)={0x2, 0x1, 0xa, 0x18, 0x86, &(0x7f00000001c0)="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"}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x404040, 0x0) (async) syz_open_pts(r1, 0x8000) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48040) (async) 22:06:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$FIONREAD(r0, 0x541b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000500)={0x8, 0x101, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'veth0\x00'}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x10001) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1e, 0x11, 0x1c5, &(0x7f0000000080)}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) socketpair(0x18, 0x3, 0x4, &(0x7f0000000980)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000004c0)=0xfffffffa) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x10) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000940)={0x2, 0x605e, 0x10, 0x40000003, 0x1de, &(0x7f0000000540)="386f1c6d62d1c59b7e7ea1f303d3f6a646f1b6ca5fc92bffa04adda3770a2e476b9b8e0015b3ef5b34948f77b2bb5f4a69a953bb5998737a35f9f451e63ddde6cd7c4f66454edd2bef9c361db4f2af137e2bbb8a47806150bec1bebd9aa148d83ae67c1ae7c63f5d436d5f59f98fef30cb66c2987127e6a7ec573739c023917be8981420ee27889d772b1296242a3a1f06714f4774ef983fdd3504a11a684195d205b24748d31240879ded3a52bb1329f9d4102e55c1f0053c9ea8e8e9e8834f91a14a73ac6ae6134e7122a2c4bb61e2ce94b1c15e956e7d93780f710a45d288bf79d2213c40f54fcf095369022b0e15a94bd48e33041ae878a9eec951b15691e14fb14511f0a5363c7cb9654bdce29438b754e906f4bd8ccfd871683768cd871e3a5329cc37fd47d4a7c66060a1609942043391b7f1d6e02c49531e396f9088df56a4dcc47ad8115de7b865b124c9b4b15ebc3f83e716cbdcbf6c5eef6cd15ac9fbdbd25c8d3b9043fad0dad9820fa917506f26d8d1d1268bd571d8a9765426ea5f6894866db9e939eac25e61a1d77cae6b789186a9fb63dcb4e21d272d4c1d1aa3d408bf035811d8de2a2ff1887fbe677a21acffe155953bb1a9daf6790521a7cfa46445397c1d89f04a91dde1c9017e95a8d3cdc3b7432fa27b418fca31b5e1feb03993442a290096c2c63097ec31e1d3fad751934df4fd8ee2fa4bc9dc6f63e77dbbfecd4e51cf45a116366056401ba5ba2f089d5418e0e3a1bd5308ef935ff07babdec25f1f477c2061366ba8a03f525c530aaedd6b54df9360980edb031efd309dc62f298b92966547ebf1fe5c07025873df974b695daa728fc133260223cecc1e114982944a7eb26f32e613174c80c63a9b878cdcdb219d48e508c97a45a55184dac82c06bb1b4c239408c0bdd03d1ac12df9e8efe22e3ca89b3f88a5f9fed1bedf64d4ea0012d1970fd741cb48d62d1c88205316d2979cc5d03a61b9a5e49408733f3e98029a0aa36ae6a9d0876a68158c2ce16875c02a0ab46f5cb19992b696fb55602f6f4138a06cc9e93827304525292b83075f0438dd2e712cbe37931a42ab64d4d591ebc834b55ff2d5447415d37ceed28bf0782d8bfebab0e8e266186799efb0a28a02856578b5eabd2711b2da414c40f39757ee2aa609f3681911749994fffeac74a749968ba724854ef28b64a2e118a1358060b7f94183e0abb9476a6485cd88e51610be6ba3c75eb977b7d312ced6526dbbe7ead7ff6e3152a0aa927299cf6183a282feea46a10c7e79370976b0a8594f0e3a85922591a013751adf3c050b45d69b93eecc64f33a04b63d55a5f630b1a96c70c103e1320bc724a88aaac4b19711a3727547dfe37809140a6dd94465ca6d7373b319be0d942fefffee8345151b53371f8bac8cec0b1d12243c40f6b93ce3525e60ceb9e604"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000500)={0x8, 0x101, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'veth0\x00'}) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x10001) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1e, 0x11, 0x1c5, &(0x7f0000000080)}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async) socketpair(0x18, 0x3, 0x4, &(0x7f0000000980)) (async) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000004c0)=0xfffffffa) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x10) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000940)={0x2, 0x605e, 0x10, 0x40000003, 0x1de, &(0x7f0000000540)="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"}) (async) 22:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44000050) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r2, 0x80047437, 0x0) 22:06:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/174, 0xae) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x3, 0xe5}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000200)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xe0b, 0x8, 0x9}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@initdev, @local}, &(0x7f0000000240)=0xc) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$FIONREAD(r0, 0x541b, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000500)={0x8, 0x101, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'veth0\x00'}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x10001) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1e, 0x11, 0x1c5, &(0x7f0000000080)}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) socketpair(0x18, 0x3, 0x4, &(0x7f0000000980)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000004c0)=0xfffffffa) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x10) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000940)={0x2, 0x605e, 0x10, 0x40000003, 0x1de, &(0x7f0000000540)="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"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000500)={0x8, 0x101, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'veth0\x00'}) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x10001) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1e, 0x11, 0x1c5, &(0x7f0000000080)}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async) socketpair(0x18, 0x3, 0x4, &(0x7f0000000980)) (async) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000004c0)=0xfffffffa) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x10) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000940)={0x2, 0x605e, 0x10, 0x40000003, 0x1de, &(0x7f0000000540)="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"}) (async) 22:06:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/174, 0xae) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x3, 0xe5}) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000200)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xe0b, 0x8, 0x9}) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@initdev, @local}, &(0x7f0000000240)=0xc) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44000050) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r2, 0x80047437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44000050) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) (async) 22:06:48 executing program 1: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0x138b, 0x3, {"48d0f2fa9ac85ebe8c484d498ef0aa6c"}, 0x6, 0x7f, 0x4}, @in={0x2, 0x4e21, @empty}}}, 0x118) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00eb"], 0x17}}, 0x0) socketpair(0x1a, 0xa, 0xe27f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) 22:06:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/174, 0xae) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x3, 0xe5}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000200)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xe0b, 0x8, 0x9}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@initdev, @local}, &(0x7f0000000240)=0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) read$snapshot(r1, &(0x7f0000000140)=""/174, 0xae) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x3, 0xe5}) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000200)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xe0b, 0x8, 0x9}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@initdev, @local}, &(0x7f0000000240)=0xc) (async) 22:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44000050) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r1}}, 0x18) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) 22:06:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00eb"], 0x17}}, 0x0) socketpair(0x1a, 0xa, 0xe27f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) 22:06:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:48 executing program 1: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0x138b, 0x3, {"48d0f2fa9ac85ebe8c484d498ef0aa6c"}, 0x6, 0x7f, 0x4}, @in={0x2, 0x4e21, @empty}}}, 0x118) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:48 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf251d0000000c00060002000000020000000800030022770365d462f7917e8608f7e715892fa1a9c882e28181fc3875ccda166b593b7ad08d10c9ba5f22316393525085ec6dbc1347ad8addbf61bc87679b33361b028f6940ba25f113d80b2a0236a2ede3ccac6ccf419fc026ca00fb4da6a8fcb5e32176b037fc", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x24040855) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDENABIO(r2, 0x4b36) 22:06:48 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x30b40, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) 22:06:48 executing program 1: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0x138b, 0x3, {"48d0f2fa9ac85ebe8c484d498ef0aa6c"}, 0x6, 0x7f, 0x4}, @in={0x2, 0x4e21, @empty}}}, 0x118) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x8000, 0x6, 0x5, 0x1, 0xc, "18316e6bdade53c6"}) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xde}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xab}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x358c4e4317643ea1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000700)={0x1, 0x1, 0xf, 0xe, 0x34, &(0x7f0000000300)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x35e, 0x9, 0x0, 0x7, 0xa, "8002e2551ef6ca25"}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/248) 22:06:48 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf251d0000000c00060002000000020000000800030022770365d462f7917e8608f7e715892fa1a9c882e28181fc3875ccda166b593b7ad08d10c9ba5f22316393525085ec6dbc1347ad8addbf61bc87679b33361b028f6940ba25f113d80b2a0236a2ede3ccac6ccf419fc026ca00fb4da6a8fcb5e32176b037fc", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x24040855) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDENABIO(r2, 0x4b36) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf251d0000000c00060002000000020000000800030022770365d462f7917e8608f7e715892fa1a9c882e28181fc3875ccda166b593b7ad08d10c9ba5f22316393525085ec6dbc1347ad8addbf61bc87679b33361b028f6940ba25f113d80b2a0236a2ede3ccac6ccf419fc026ca00fb4da6a8fcb5e32176b037fc", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x24040855) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDENABIO(r2, 0x4b36) (async) 22:06:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:48 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x800) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x30b40, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) 22:06:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x8000, 0x6, 0x5, 0x1, 0xc, "18316e6bdade53c6"}) (async) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xde}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xab}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x358c4e4317643ea1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000700)={0x1, 0x1, 0xf, 0xe, 0x34, &(0x7f0000000300)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x35e, 0x9, 0x0, 0x7, 0xa, "8002e2551ef6ca25"}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/248) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xde}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xab}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x358c4e4317643ea1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000700)={0x1, 0x1, 0xf, 0xe, 0x34, &(0x7f0000000300)}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x35e, 0x9, 0x0, 0x7, 0xa, "8002e2551ef6ca25"}) (async) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/248) (async) 22:06:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:06:48 executing program 4: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x800) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x30b40, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) 22:06:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:48 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf251d0000000c00060002000000020000000800030022770365d462f7917e8608f7e715892fa1a9c882e28181fc3875ccda166b593b7ad08d10c9ba5f22316393525085ec6dbc1347ad8addbf61bc87679b33361b028f6940ba25f113d80b2a0236a2ede3ccac6ccf419fc026ca00fb4da6a8fcb5e32176b037fc", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x24040855) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDENABIO(r2, 0x4b36) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x8000, 0x6, 0x5, 0x1, 0xc, "18316e6bdade53c6"}) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x8000, 0x6, 0x5, 0x1, 0xc, "18316e6bdade53c6"}) (async) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) (async) 22:06:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x7a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xde}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xab}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x358c4e4317643ea1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000700)={0x1, 0x1, 0xf, 0xe, 0x34, &(0x7f0000000300)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x35e, 0x9, 0x0, 0x7, 0xa, "8002e2551ef6ca25"}) (async) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000000c0)=""/248) 22:06:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000080)=0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) 22:06:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4103) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x2, 0x1, 0x7, 0x1000, 0x14, &(0x7f0000000280)="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"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r2, 0x40045436, 0x8) socketpair(0x6, 0x1, 0x81, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRK(r1, 0x5409, 0x1f) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x64) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) ioctl$KDSKBLED(r1, 0x4b65, 0x5) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4008018) read$snapshot(r4, &(0x7f0000000780)=""/143, 0x8f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) 22:06:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0xe, 0x1cb, &(0x7f0000000080)="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"}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000480)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000004c0)={0xe53b, 0x7ff}) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0211000002000000000000000000000029ce2cb78e7f34ada88b185d789d038b8384205af67b40cb88316947e757a35546ffb462103407fe60b2e4e2d12023c246e6a27ac344ccbe26494f1b0d487a0e46984a8e6ef38042838f5f96af76cc02eb81e2b5b8b6449cedb88630481eab14a71b3e1cdd03b0bffd51f5c1bf"], 0x17}}, 0x0) 22:06:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x503) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xe5f8) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0xe932, 0x900000}) 22:06:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) read$snapshot(r2, &(0x7f0000000180)=""/161, 0xa1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0xe, 0x1cb, &(0x7f0000000080)="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"}) (async) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000480)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000004c0)={0xe53b, 0x7ff}) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000080)=0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) 22:06:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0211000002000000000000000000000029ce2cb78e7f34ada88b185d789d038b8384205af67b40cb88316947e757a35546ffb462103407fe60b2e4e2d12023c246e6a27ac344ccbe26494f1b0d487a0e46984a8e6ef38042838f5f96af76cc02eb81e2b5b8b6449cedb88630481eab14a71b3e1cdd03b0bffd51f5c1bf"], 0x17}}, 0x0) 22:06:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x503) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xe5f8) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0xe932, 0x900000}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x503) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xe5f8) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x7) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0xe932, 0x900000}) (async) 22:06:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) read$snapshot(r2, &(0x7f0000000180)=""/161, 0xa1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) read$snapshot(r2, &(0x7f0000000180)=""/161, 0xa1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4103) (async) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x2, 0x1, 0x7, 0x1000, 0x14, &(0x7f0000000280)="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"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$TIOCSIG(r2, 0x40045436, 0x8) (async, rerun: 32) socketpair(0x6, 0x1, 0x81, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRK(r1, 0x5409, 0x1f) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x64) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x5) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4008018) (async) read$snapshot(r4, &(0x7f0000000780)=""/143, 0x8f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x9) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0211000002000000000000000000000029ce2cb78e7f34ada88b185d789d038b8384205af67b40cb88316947e757a35546ffb462103407fe60b2e4e2d12023c246e6a27ac344ccbe26494f1b0d487a0e46984a8e6ef38042838f5f96af76cc02eb81e2b5b8b6449cedb88630481eab14a71b3e1cdd03b0bffd51f5c1bf"], 0x17}}, 0x0) 22:06:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0xe, 0x1cb, &(0x7f0000000080)="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"}) (async) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000480)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000004c0)={0xe53b, 0x7ff}) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000080)=0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = syz_open_pts(r0, 0x503) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xe5f8) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x7) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0xe932, 0x900000}) 22:06:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) read$snapshot(r2, &(0x7f0000000180)=""/161, 0xa1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) read$snapshot(r2, &(0x7f0000000180)=""/161, 0xa1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0xffff56ea, 0x6bc}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4103) (async) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x2, 0x1, 0x7, 0x1000, 0x14, &(0x7f0000000280)="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"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r2, 0x40045436, 0x8) (async) socketpair(0x6, 0x1, 0x81, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRK(r1, 0x5409, 0x1f) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x64) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x5) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4008018) (async) read$snapshot(r4, &(0x7f0000000780)=""/143, 0x8f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x9) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:06:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0xffff56ea, 0x6bc}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0xffff56ea, 0x6bc}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r1, 0x541b, 0x0) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) (async) 22:06:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x3f, 0x59, 0x3}) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3f, 0x5, 0x2}) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0x3f) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3f, 0x5, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3f, 0x5, 0x2}) (async) 22:06:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x3f, 0x59, 0x3}) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0x3f) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0xffff56ea, 0x6bc}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 32) ioctl$FIONREAD(r1, 0x541b, 0x0) (async, rerun: 32) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20200, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 22:06:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x3f, 0x59, 0x3}) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3f, 0x5, 0x2}) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0x3f) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1, 0x9, 0x1ff}) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/106) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x2, 0x8, 0x7}) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3f, 0x4, 0x9, @empty, @mcast1, 0x1, 0x10, 0xfff, 0x2}}) 22:06:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:49 executing program 5: ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10103, 0x0) ioctl$KDENABIO(r0, 0x4b36) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200400, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x5) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3f, 0x4, 0x9, @empty, @mcast1, 0x1, 0x10, 0xfff, 0x2}}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3f, 0x4, 0x9, @empty, @mcast1, 0x1, 0x10, 0xfff, 0x2}}) (async) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1, 0x9, 0x1ff}) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/106) (async, rerun: 32) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x2, 0x8, 0x7}) (rerun: 32) 22:06:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200400, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x5) 22:06:49 executing program 5: ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) (async, rerun: 32) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10103, 0x0) (rerun: 32) ioctl$KDENABIO(r0, 0x4b36) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3f, 0x4, 0x9, @empty, @mcast1, 0x1, 0x10, 0xfff, 0x2}}) 22:06:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1, 0x9, 0x1ff}) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/106) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x2, 0x8, 0x7}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1, 0x9, 0x1ff}) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/106) (async) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x2, 0x8, 0x7}) (async) 22:06:49 executing program 5: ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10103, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10103, 0x0) (async) ioctl$KDENABIO(r0, 0x4b36) (async) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200400, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x5) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200400, 0x0) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x5) (async) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:06:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x1f, 0x3, 0xffc1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb33, 0x76}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x4}], "c59f0b5ba896bd1b"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x9}, {0x28, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x81}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x1}, {0xe3, 0x1}, {0x6, 0x6}, {0x3e, 0x1}, {0x5, 0x4}, {0x8, 0x5}], "050dccd3e9fcd146"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5, 0x80}, {0x4}], "10de44f4a36661bd"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x180}, 0x4) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x1, 0x81, 0x0, 0x24, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d2, 0x81, 0x3f, 0x46, 0x4, 0x40000000}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0xc6f, @private2, 0x9}, @in6={0xa, 0x4e22, 0x9, @remote, 0x8}}, @sadb_ident={0x2, 0xb, 0x200, 0x0, 0x9c1a}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x0, @local, 0x9}, @in={0x2, 0x4e22, @broadcast}}, @sadb_lifetime={0x4, 0x4, 0x2, 0x1ff, 0x7, 0x100}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@private=0xa010100, 0x23, 0x10, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x120}}, 0x4841) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000180)=""/171, 0xab) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="4a87a7583c1f1c881c363d8c3d667c0004000000000000d5e8b64884b5f7c6367c1ea70a2948bffaf6fd08d8dfb72e3e341d9975c70800302d6291c3d497e76c63fd8a08859f00000400000000534067c1f846b3a55b33db858f3667a191e9036360663368ffdcd2a000402e89bbe607bf5a77c3e517c52d") 22:06:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000180)=0xdce0) ioctl$TIOCEXCL(r1, 0x540c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r5, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x39, 0x5, {"b44a680167db888704b411f9d00bdf57"}, 0x9, 0x7, 0x800}, @in={0x2, 0x4e24, @remote}}}, 0x118) 22:06:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4202, 0x6, 0x80}) 22:06:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x1f, 0x3, 0xffc1}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb33, 0x76}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x4}], "c59f0b5ba896bd1b"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x9}, {0x28, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x81}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x1}, {0xe3, 0x1}, {0x6, 0x6}, {0x3e, 0x1}, {0x5, 0x4}, {0x8, 0x5}], "050dccd3e9fcd146"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5, 0x80}, {0x4}], "10de44f4a36661bd"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x180}, 0x4) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000040)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 22:06:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x1, 0x81, 0x0, 0x24, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d2, 0x81, 0x3f, 0x46, 0x4, 0x40000000}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0xc6f, @private2, 0x9}, @in6={0xa, 0x4e22, 0x9, @remote, 0x8}}, @sadb_ident={0x2, 0xb, 0x200, 0x0, 0x9c1a}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x0, @local, 0x9}, @in={0x2, 0x4e22, @broadcast}}, @sadb_lifetime={0x4, 0x4, 0x2, 0x1ff, 0x7, 0x100}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@private=0xa010100, 0x23, 0x10, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x120}}, 0x4841) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 22:06:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000180)=""/171, 0xab) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="4a87a7583c1f1c881c363d8c3d667c0004000000000000d5e8b64884b5f7c6367c1ea70a2948bffaf6fd08d8dfb72e3e341d9975c70800302d6291c3d497e76c63fd8a08859f00000400000000534067c1f846b3a55b33db858f3667a191e9036360663368ffdcd2a000402e89bbe607bf5a77c3e517c52d") syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000180)=""/171, 0xab) (async) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="4a87a7583c1f1c881c363d8c3d667c0004000000000000d5e8b64884b5f7c6367c1ea70a2948bffaf6fd08d8dfb72e3e341d9975c70800302d6291c3d497e76c63fd8a08859f00000400000000534067c1f846b3a55b33db858f3667a191e9036360663368ffdcd2a000402e89bbe607bf5a77c3e517c52d") (async) 22:06:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4202, 0x6, 0x80}) 22:06:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000180)=0xdce0) (async) ioctl$TIOCEXCL(r1, 0x540c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000001c0)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r5, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x39, 0x5, {"b44a680167db888704b411f9d00bdf57"}, 0x9, 0x7, 0x800}, @in={0x2, 0x4e24, @remote}}}, 0x118) 22:06:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x1f, 0x3, 0xffc1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb33, 0x76}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x4}], "c59f0b5ba896bd1b"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x6}, {0x9}, {0x28, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x81}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x1}, {0xe3, 0x1}, {0x6, 0x6}, {0x3e, 0x1}, {0x5, 0x4}, {0x8, 0x5}], "050dccd3e9fcd146"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5, 0x80}, {0x4}], "10de44f4a36661bd"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x180}, 0x4) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000040)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 22:06:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (rerun: 32) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x1, 0x81, 0x0, 0x24, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d2, 0x81, 0x3f, 0x46, 0x4, 0x40000000}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0xc6f, @private2, 0x9}, @in6={0xa, 0x4e22, 0x9, @remote, 0x8}}, @sadb_ident={0x2, 0xb, 0x200, 0x0, 0x9c1a}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x0, @local, 0x9}, @in={0x2, 0x4e22, @broadcast}}, @sadb_lifetime={0x4, 0x4, 0x2, 0x1ff, 0x7, 0x100}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@private=0xa010100, 0x23, 0x10, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x120}}, 0x4841) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) 22:06:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000180)=""/171, 0xab) (async, rerun: 32) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="4a87a7583c1f1c881c363d8c3d667c0004000000000000d5e8b64884b5f7c6367c1ea70a2948bffaf6fd08d8dfb72e3e341d9975c70800302d6291c3d497e76c63fd8a08859f00000400000000534067c1f846b3a55b33db858f3667a191e9036360663368ffdcd2a000402e89bbe607bf5a77c3e517c52d") (rerun: 32) 22:06:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4202, 0x6, 0x80}) 22:06:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000180)=0xdce0) ioctl$TIOCEXCL(r1, 0x540c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r5, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x39, 0x5, {"b44a680167db888704b411f9d00bdf57"}, 0x9, 0x7, 0x800}, @in={0x2, 0x4e24, @remote}}}, 0x118) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000180)=0xdce0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000001c0)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r5, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x39, 0x5, {"b44a680167db888704b411f9d00bdf57"}, 0x9, 0x7, 0x800}, @in={0x2, 0x4e24, @remote}}}, 0x118) (async) 22:06:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = syz_open_pts(r1, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x200003) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:50 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:50 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 22:06:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0xffffffffffffffed) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) 22:06:50 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5800e5503773f7d84326"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad3c7c512c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3149fd6e63a8e94ad8b6f23c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/189) 22:06:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f00000000c0)=0x4) 22:06:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0xffffffffffffffed) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0xffffffffffffffed) (async) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) (async) 22:06:50 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_FREE(r0, 0x3305) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async) 22:06:50 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = syz_open_pts(r1, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x200003) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) syz_open_pts(r1, 0x2000) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x200003) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5800e5503773f7d84326"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad3c7c512c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3149fd6e63a8e94ad8b6f23c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) (async) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/189) 22:06:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f00000000c0)=0x4) 22:06:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021100020200"/16], 0x17}}, 0x0) 22:06:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0xffffffffffffffed) (async) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0x1) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) 22:06:50 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_FREE(r0, 0x3305) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async) 22:06:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (rerun: 64) r2 = syz_open_pts(r1, 0x2000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x200003) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021100020200"/16], 0x17}}, 0x0) 22:06:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5800e5503773f7d84326"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad3c7c512c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3149fd6e63a8e94ad8b6f23c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) (async) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/189) 22:06:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f00000000c0)=0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f00000000c0)=0x4) (async) 22:06:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) clock_getres(0x7, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x7, 0x1}) 22:06:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021100020200"/16], 0x17}}, 0x0) 22:06:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$FIONREAD(r0, 0x541b, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x8) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000080)=0x4) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 22:06:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) clock_getres(0x7, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x7, 0x1}) 22:06:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000280)={0x2, 0x0, 0xa, 0x1d, 0xb6, &(0x7f0000000300)="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"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000700)=0x4000) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000a0000020000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf256a00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/146, 0x92) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ioctl$TCSBRK(r0, 0x5409, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x5) 22:06:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:06:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$FIONREAD(r0, 0x541b, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x8) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000080)=0x4) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x8) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000080)=0x4) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) 22:06:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) (async) clock_getres(0x7, &(0x7f0000000040)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x7, 0x1}) 22:06:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) (rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/146, 0x92) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) (async) ioctl$TCSBRK(r0, 0x5409, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x5) 22:06:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000280)={0x2, 0x0, 0xa, 0x1d, 0xb6, &(0x7f0000000300)="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"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000700)=0x4000) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000a0000020000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf256a00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:06:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) (async, rerun: 32) ioctl$FIONREAD(r0, 0x541b, 0x0) (rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x8) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000080)=0x4) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 22:06:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4c01, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x4, 0x6, 0x4, 0x3f, 0x8, "0cab9ab87ba01753"}) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000280)={0x2, 0x0, 0xa, 0x1d, 0xb6, &(0x7f0000000300)="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"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000700)=0x4000) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000a0000020000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf256a00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000280)={0x2, 0x0, 0xa, 0x1d, 0xb6, &(0x7f0000000300)="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"}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000700)=0x4000) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000a0000020000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf256a00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) 22:06:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000072000000080003004dcef7134f59fdbbba750d85be407c475e3e69b6db9ea611c09f", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x60844) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0xa) 22:06:51 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:06:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/146, 0x92) (async, rerun: 32) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) (rerun: 32) ioctl$TCSBRK(r0, 0x5409, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x5) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4c01, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x4, 0x6, 0x4, 0x3f, 0x8, "0cab9ab87ba01753"}) 22:06:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80047437, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0xfffffffffffffe76}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0x5}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) [ 1691.769603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 22:06:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/146) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000240)) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xba, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1f}}}, 0xa0) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)=0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xa, 0x9, 0x1a3, &(0x7f00000002c0)="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"}) 22:06:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000072000000080003004dcef7134f59fdbbba750d85be407c475e3e69b6db9ea611c09f", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x60844) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0xa) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async, rerun: 64) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4c01, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x4, 0x6, 0x4, 0x3f, 0x8, "0cab9ab87ba01753"}) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0xfffffffffffffe76}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0x5}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0xfffffffffffffe76}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0x5}) (async) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) (async) 22:06:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/146) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000240)) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xba, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1f}}}, 0xa0) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)=0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xa, 0x9, 0x1a3, &(0x7f00000002c0)="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"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/146) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000240)) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000280)) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xba, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1f}}}, 0xa0) (async) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)=0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xa, 0x9, 0x1a3, &(0x7f00000002c0)="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"}) (async) 22:06:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) (async, rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) (rerun: 64) 22:06:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000072000000080003004dcef7134f59fdbbba750d85be407c475e3e69b6db9ea611c09f", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x60844) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0xa) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x146) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0xfffffffffffffe76}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0x5}) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0xfffffffffffffe76}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x5, 0x5}) (async) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) (async) 22:06:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x3, 0x1ff}) 22:06:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/146) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000240)) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000280)) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0xba, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1f}}}, 0xa0) (async, rerun: 64) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)=0x3) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xa, 0x9, 0x1a3, &(0x7f00000002c0)="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"}) 22:06:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x146) 22:06:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000}, 0x10}}, 0x8000) 22:06:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x3, 0x1ff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x3, 0x1ff}) (async) 22:06:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x146) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x146) (async) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000}, 0x10}}, 0x8000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000}, 0x10}}, 0x8000) (async) 22:06:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) 22:06:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) 22:06:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:06:51 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x3, 0x1ff}) (rerun: 32) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/142, 0x8e) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/29) 22:06:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000}, 0x10}}, 0x8000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000}, 0x10}}, 0x8000) (async) 22:06:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/142, 0x8e) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/29) 22:06:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:51 executing program 0: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0x2, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000045) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000480)={0x2, 0x1, 0x16, 0x19, 0x6d, &(0x7f0000000080)="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"}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x5) 22:06:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) 22:06:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:06:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/142, 0x8e) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/29) 22:06:51 executing program 0: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0x2, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000045) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000480)={0x2, 0x1, 0x16, 0x19, 0x6d, &(0x7f0000000080)="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"}) (async) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x5) 22:06:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/146, 0x92) ioctl$KDSKBLED(r1, 0x4b65, 0x80000001) 22:06:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0xfffffffffffffffd) 22:06:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:06:52 executing program 0: sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0x2, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000045) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000480)={0x2, 0x1, 0x16, 0x19, 0x6d, &(0x7f0000000080)="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"}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x5) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0x2, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000045) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000480)={0x2, 0x1, 0x16, 0x19, 0x6d, &(0x7f0000000080)="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"}) (async) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x5) (async) 22:06:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) fanotify_init(0x4, 0x40000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/146, 0x92) ioctl$KDSKBLED(r1, 0x4b65, 0x80000001) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000080)=""/146, 0x92) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x80000001) (async) 22:06:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0xfffffffffffffffd) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0xfffffffffffffffd) (async) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:06:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) fanotify_init(0x4, 0x40000) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x6b7302cfbc1f9046) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@rand_addr, @dev}, &(0x7f0000000240)=0xc) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/146, 0x92) (async, rerun: 64) ioctl$KDSKBLED(r1, 0x4b65, 0x80000001) (rerun: 64) 22:06:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$KDSKBLED(r0, 0x4b65, 0xfffffffffffffffd) 22:06:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) fanotify_init(0x4, 0x40000) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00200200000086ac69bc15000009"], 0x17}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) socket$inet(0x2, 0x5, 0x0) 22:06:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x101401, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x401) fanotify_mark(r1, 0x2, 0x8, r2, &(0x7f0000000080)='./file0\x00') 22:06:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2, 0x4010, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00200200000086ac69bc15000009"], 0x17}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) socket$inet(0x2, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00200200000086ac69bc15000009"], 0x17}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) socket$inet(0x2, 0x5, 0x0) (async) 22:06:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x6b7302cfbc1f9046) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@rand_addr, @dev}, &(0x7f0000000240)=0xc) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2, 0x4010, r0, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00200200000086ac69bc15000009"], 0x17}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) socket$inet(0x2, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="00200200000086ac69bc15000009"], 0x17}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) socket$inet(0x2, 0x5, 0x0) (async) 22:06:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x6b7302cfbc1f9046) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@rand_addr, @dev}, &(0x7f0000000240)=0xc) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x6b7302cfbc1f9046) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) (async) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@rand_addr, @dev}, &(0x7f0000000240)=0xc) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) 22:06:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x101401, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x401) (async) fanotify_mark(r1, 0x2, 0x8, r2, &(0x7f0000000080)='./file0\x00') 22:06:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2, 0x4010, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2, 0x4010, r0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) (async) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02110000020000030000000000000000"], 0x17}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7) (async) 22:06:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@rose, @netrom, @remote, @rose, @netrom, @netrom]}, &(0x7f0000000080)=0x40, 0x1000) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)=0x8) 22:06:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x101401, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x401) (async) fanotify_mark(r1, 0x2, 0x8, r2, &(0x7f0000000080)='./file0\x00') 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02110000020000030000000000000000"], 0x17}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7) 22:06:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0xffff, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0xcb72, {"a23e4ffc7162734efd90aa70a1a6d002"}, 0x1ff, 0x2, 0xffffffffffff775e}, @in={0x2, 0x4e21, @empty}}}, 0x118) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x40}}}, 0x38) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000000)) 22:06:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/153, 0x99) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000000c0)={0x343, 0x8}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)) 22:06:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@rose, @netrom, @remote, @rose, @netrom, @netrom]}, &(0x7f0000000080)=0x40, 0x1000) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)=0x8) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02110000020000030000000000000000"], 0x17}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02110000020000030000000000000000"], 0x17}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) 22:06:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0xffff, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0xcb72, {"a23e4ffc7162734efd90aa70a1a6d002"}, 0x1ff, 0x2, 0xffffffffffff775e}, @in={0x2, 0x4e21, @empty}}}, 0x118) (async, rerun: 64) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) (rerun: 64) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x40}}}, 0x38) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000000)) 22:06:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/153, 0x99) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000000c0)={0x343, 0x8}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f00000001c0)=""/153, 0x99) (async) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000000c0)={0x343, 0x8}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)) (async) 22:06:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x33}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x94ada910ad6b64d4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 22:06:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@rose, @netrom, @remote, @rose, @netrom, @netrom]}, &(0x7f0000000080)=0x40, 0x1000) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)=0x8) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socketpair(0x30, 0x5, 0x2, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @link_local}]}) 22:06:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f00000001c0)=""/153, 0x99) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000000c0)={0x343, 0x8}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f00000001c0)=""/153, 0x99) (async) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000000c0)={0x343, 0x8}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$TIOCPKT(r2, 0x80045438, &(0x7f0000000000)) (async) 22:06:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0xffff, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0xcb72, {"a23e4ffc7162734efd90aa70a1a6d002"}, 0x1ff, 0x2, 0xffffffffffff775e}, @in={0x2, 0x4e21, @empty}}}, 0x118) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x40}}}, 0x38) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0xffff, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0xcb72, {"a23e4ffc7162734efd90aa70a1a6d002"}, 0x1ff, 0x2, 0xffffffffffff775e}, @in={0x2, 0x4e21, @empty}}}, 0x118) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x40}}}, 0x38) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000000)) (async) 22:06:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x33}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x94ada910ad6b64d4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x33}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x94ada910ad6b64d4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:52 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x65e, 0x2, 0x7, 0x1, 0x0, "9b6edfdfdfea52a1"}) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000100)=""/223, 0xdf, 0x2002, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@bcast, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x4020940d, &(0x7f0000000040)=0x3) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000000)) 22:06:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) (async) 22:06:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socketpair(0x30, 0x5, 0x2, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @link_local}]}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) socketpair(0x30, 0x5, 0x2, &(0x7f00000000c0)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @link_local}]}) (async) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x1) read$snapshot(r1, &(0x7f0000000180)=""/118, 0x76) read$snapshot(r1, &(0x7f0000000040)=""/71, 0x47) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x33}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x94ada910ad6b64d4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:53 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x65e, 0x2, 0x7, 0x1, 0x0, "9b6edfdfdfea52a1"}) (async) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000100)=""/223, 0xdf, 0x2002, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@bcast, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x4020940d, &(0x7f0000000040)=0x3) (async) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000000)) 22:06:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socketpair(0x30, 0x5, 0x2, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x5, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @link_local}]}) 22:06:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x6, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @datasec={0x9, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x1, 0x786}, {0x1, 0x2}, {0x5, 0x10000, 0x6}, {0x5, 0x9, 0x4}, {0x1, 0x80, 0x1ff}], "ce"}, @var={0xe, 0x0, 0x0, 0xe, 0x5}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x6, 0xb8}, {0x4, 0x7fff}, {0x10, 0xb7}]}, @volatile={0xb}, @enum={0x3, 0x9, 0x0, 0x6, 0x4, [{0x5, 0x20}, {0x9, 0xc4}, {0x4, 0x4}, {0xf, 0x5}, {0x2, 0x40}, {0xa, 0x1}, {0x0, 0x7fff}, {0xe, 0x535}, {0x1, 0x8}]}]}, {0x0, [0x61, 0x0, 0x30, 0x61]}}, &(0x7f00000001c0)=""/238, 0x116, 0xee, 0x1}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) read$snapshot(r1, &(0x7f0000000180)=""/118, 0x76) (async) read$snapshot(r1, &(0x7f0000000040)=""/71, 0x47) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x6, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @datasec={0x9, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x1, 0x786}, {0x1, 0x2}, {0x5, 0x10000, 0x6}, {0x5, 0x9, 0x4}, {0x1, 0x80, 0x1ff}], "ce"}, @var={0xe, 0x0, 0x0, 0xe, 0x5}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x6, 0xb8}, {0x4, 0x7fff}, {0x10, 0xb7}]}, @volatile={0xb}, @enum={0x3, 0x9, 0x0, 0x6, 0x4, [{0x5, 0x20}, {0x9, 0xc4}, {0x4, 0x4}, {0xf, 0x5}, {0x2, 0x40}, {0xa, 0x1}, {0x0, 0x7fff}, {0xe, 0x535}, {0x1, 0x8}]}]}, {0x0, [0x61, 0x0, 0x30, 0x61]}}, &(0x7f00000001c0)=""/238, 0x116, 0xee, 0x1}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:53 executing program 4: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x3) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x6, 0xffff}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021100000200000000000000000000008220507fddcf65902c05013af7f46b3ac041d903e7a1885516df5cf6246242b6fe1f7b2299da15b4047c4397bfba693eadb216d2ad752ff46a2a2f8393fbcf919433a96fa251f602e79cdd97680d9e02fe2ddd3932a5ba9944aa328573dc983450eaa440a1b6bb8a411f4c5830eb9888382e83aece37d1f83b9a8b006a0f79a26f204c129f06dededf138221d403c14f2617e60885a4dea51562de0991f806efbe1aac586a4c085f38a69040a947a6b63bb29b9c0c3c1a05cb0f8c05fed8be17ed83d47e9e6aab43868e52d18f334754e03ddbcf12ce5b87f1d180e1fd"], 0x17}}, 0x0) 22:06:53 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x65e, 0x2, 0x7, 0x1, 0x0, "9b6edfdfdfea52a1"}) (async) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000100)=""/223, 0xdf, 0x2002, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@bcast, @default, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x4020940d, &(0x7f0000000040)=0x3) (async) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000000)) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x1) read$snapshot(r1, &(0x7f0000000180)=""/118, 0x76) read$snapshot(r1, &(0x7f0000000040)=""/71, 0x47) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) read$snapshot(r1, &(0x7f0000000180)=""/118, 0x76) (async) read$snapshot(r1, &(0x7f0000000040)=""/71, 0x47) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) (async) 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) 22:06:53 executing program 4: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x3) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x6, 0xffff}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021100000200000000000000000000008220507fddcf65902c05013af7f46b3ac041d903e7a1885516df5cf6246242b6fe1f7b2299da15b4047c4397bfba693eadb216d2ad752ff46a2a2f8393fbcf919433a96fa251f602e79cdd97680d9e02fe2ddd3932a5ba9944aa328573dc983450eaa440a1b6bb8a411f4c5830eb9888382e83aece37d1f83b9a8b006a0f79a26f204c129f06dededf138221d403c14f2617e60885a4dea51562de0991f806efbe1aac586a4c085f38a69040a947a6b63bb29b9c0c3c1a05cb0f8c05fed8be17ed83d47e9e6aab43868e52d18f334754e03ddbcf12ce5b87f1d180e1fd"], 0x17}}, 0x0) 22:06:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xb531, 0x200, 0x4, 0x20, 0x2}}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) r2 = syz_open_pts(r0, 0x20141) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x2, 0x5, 0x8}) 22:06:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x6, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @datasec={0x9, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x1, 0x786}, {0x1, 0x2}, {0x5, 0x10000, 0x6}, {0x5, 0x9, 0x4}, {0x1, 0x80, 0x1ff}], "ce"}, @var={0xe, 0x0, 0x0, 0xe, 0x5}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x6, 0xb8}, {0x4, 0x7fff}, {0x10, 0xb7}]}, @volatile={0xb}, @enum={0x3, 0x9, 0x0, 0x6, 0x4, [{0x5, 0x20}, {0x9, 0xc4}, {0x4, 0x4}, {0xf, 0x5}, {0x2, 0x40}, {0xa, 0x1}, {0x0, 0x7fff}, {0xe, 0x535}, {0x1, 0x8}]}]}, {0x0, [0x61, 0x0, 0x30, 0x61]}}, &(0x7f00000001c0)=""/238, 0x116, 0xee, 0x1}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:53 executing program 4: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x3) (async, rerun: 32) r0 = socket$key(0xf, 0x3, 0x2) (rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x6, 0xffff}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021100000200000000000000000000008220507fddcf65902c05013af7f46b3ac041d903e7a1885516df5cf6246242b6fe1f7b2299da15b4047c4397bfba693eadb216d2ad752ff46a2a2f8393fbcf919433a96fa251f602e79cdd97680d9e02fe2ddd3932a5ba9944aa328573dc983450eaa440a1b6bb8a411f4c5830eb9888382e83aece37d1f83b9a8b006a0f79a26f204c129f06dededf138221d403c14f2617e60885a4dea51562de0991f806efbe1aac586a4c085f38a69040a947a6b63bb29b9c0c3c1a05cb0f8c05fed8be17ed83d47e9e6aab43868e52d18f334754e03ddbcf12ce5b87f1d180e1fd"], 0x17}}, 0x0) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0x7ff, 0x8, 0x8001, 0x10, "04cbde3435802e54"}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x5, 0x1, 0x80}) 22:06:53 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022abd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0800010002000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040005) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r2, 0x80047437, 0x0) 22:06:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xb531, 0x200, 0x4, 0x20, 0x2}}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) (async) r2 = syz_open_pts(r0, 0x20141) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x2, 0x5, 0x8}) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x5, 0x15c, &(0x7f0000000080)}) 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x5, 0x1, 0x80}) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0x7ff, 0x8, 0x8001, 0x10, "04cbde3435802e54"}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0x7ff, 0x8, 0x8001, 0x10, "04cbde3435802e54"}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xb531, 0x200, 0x4, 0x20, 0x2}}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) r2 = syz_open_pts(r0, 0x20141) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x2, 0x5, 0x8}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xb531, 0x200, 0x4, 0x20, 0x2}}) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) (async) syz_open_pts(r0, 0x20141) (async) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x2, 0x5, 0x8}) (async) 22:06:53 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fanotify_mark(0xffffffffffffffff, 0x10, 0x1000, r0, &(0x7f00000000c0)='./file0\x00') 22:06:53 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022abd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0800010002000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040005) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r2, 0x80047437, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022abd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0800010002000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040005) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) (async) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x5, 0x15c, &(0x7f0000000080)}) 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x5, 0x1, 0x80}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7, 0x3}) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x5, 0x1, 0x80}) (async) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0x7ff, 0x8, 0x8001, 0x10, "04cbde3435802e54"}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0x7ff, 0x8, 0x8001, 0x10, "04cbde3435802e54"}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:53 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fanotify_mark(0xffffffffffffffff, 0x10, 0x1000, r0, &(0x7f00000000c0)='./file0\x00') socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x10, 0x1000, r0, &(0x7f00000000c0)='./file0\x00') (async) 22:06:53 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022abd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0800010002000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040005) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) 22:06:53 executing program 0: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x5, 0x15c, &(0x7f0000000080)}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1, 0x5, 0x15c, &(0x7f0000000080)}) (async) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x40) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x100, 0x1}) 22:06:53 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fanotify_mark(0xffffffffffffffff, 0x10, 0x1000, r0, &(0x7f00000000c0)='./file0\x00') 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x3e, 0x4}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x640480, 0x0) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x9) r1 = syz_open_pts(0xffffffffffffffff, 0x141000) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x40) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async, rerun: 64) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x100, 0x1}) (rerun: 64) 22:06:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x80010002}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:53 executing program 0: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) (async) 22:06:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) (async, rerun: 32) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x3e, 0x4}) (async, rerun: 64) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) (async, rerun: 64) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x640480, 0x0) 22:06:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x2, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@private0, 0x11, 0x14}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x40}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) recvfrom$rose(r2, &(0x7f00000000c0)=""/125, 0x7d, 0x40000025, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) 22:06:53 executing program 0: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) 22:06:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x80010002}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x9) r1 = syz_open_pts(0xffffffffffffffff, 0x141000) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x9) (async) syz_open_pts(0xffffffffffffffff, 0x141000) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x40) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x100, 0x1}) 22:06:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x3e, 0x4}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x640480, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x3e, 0x4}) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x640480, 0x0) (async) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x2, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@private0, 0x11, 0x14}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x40}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) recvfrom$rose(r2, &(0x7f00000000c0)=""/125, 0x7d, 0x40000025, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) 22:06:54 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000001080)={0x15, 0x110, 0xfa00, {r0, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98a}, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x6a1}}}, 0x118) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="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") ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) r2 = syz_open_pts(r1, 0x8000) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000011c0)=""/114) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x80010002}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x2, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@private0, 0x11, 0x14}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x40}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) recvfrom$rose(r2, &(0x7f00000000c0)=""/125, 0x7d, 0x40000025, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x2, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@private0, 0x11, 0x14}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x40}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) recvfrom$rose(r2, &(0x7f00000000c0)=""/125, 0x7d, 0x40000025, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) (async) 22:06:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x9) r1 = syz_open_pts(0xffffffffffffffff, 0x141000) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x9) (async) syz_open_pts(0xffffffffffffffff, 0x141000) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0xff, 0x2, 0x0, 0xa, "7239395e84bb6759"}) 22:06:54 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000001080)={0x15, 0x110, 0xfa00, {r0, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98a}, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x6a1}}}, 0x118) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="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") ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) (async) r2 = syz_open_pts(r1, 0x8000) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000011c0)=""/114) 22:06:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0xa6, 0xac, 0x4}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000480)=0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x145, &(0x7f0000000080)="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"}) 22:06:54 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000001080)={0x15, 0x110, 0xfa00, {r0, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98a}, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x6a1}}}, 0x118) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="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") ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) r2 = syz_open_pts(r1, 0x8000) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000011c0)=""/114) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000001080)={0x15, 0x110, 0xfa00, {r0, 0x8000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98a}, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x6a1}}}, 0x118) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="39fe102204b7ba0c031f7111f8c2a1b89c4eadfaa59ac2a72e75f178936a3dc0f86060995eca27ebcfdd763d6c7164a9d9ebb499f054b64fcb8b7d71946f2202e9c5c586b84b2dd69006e6bfdb6be2a2444461b6da60c8b1243a900bfa335dd76bffee9dd4474c46ad92294b83b7910d57a1ad13929f258420fcdbf7af31c31dc41edbd385c1968671c64d8498c5a1f58a165344682985fce2d1a73c6b51492008cb1ac56aefd5cdd61358ba49c6ddfb3e7d391b3fba3b7c8a3de6032580f4f499680783ff5d4e5896c6d3f298b21eeeb2cb83ea6faf0d7640453054cbbf997cc2b0fa10bcc47762daf048e2a03dcce5a1aad0fc0756d86f5ba1a33a34b86cfa0504ae96a0f4113a3a21aa1d5d642aaf154570d63fa7419d451fb8f35e21b5673432bf016afbe91edeb26347fb4c1839dd3584311a0e3a1fe84fa262fdaa232136755a9478cf3e08f0a41735e62bb1b1256327bae495330dfc31d2c751c050f6e75ee4e368506328146ed7c95e84b5ffdb4e55892b5a01933f5ad9d00ee6c7fd4b98e68a5bb00b5a7478facc1900f26bf44bae94fc7625515fc3c49b8b9e256a1f0d093f92d5946140f2cc130cfa78a9d980d5156463239fb890681f8156d84a372686fa425f244d3b2b0cda3f26f077c08baa3cfad9bba9ca0a85e35747c261cb17b3365398325735030d51a4aebf07f0f74a1ed1e2ff6272878c8297eacce2881a798cf1a709f2289ae7b313c982d34a2feb04014e606fce6bb93cd63be18a59e958de7c7d578ad4d2eac3f473272512a365c4835dec73756fe7020cf86e214c95b25a210f84b07c2ed9acd907de2dbffb7f9cf8cbc5068895d479ed6bcbeaaf35862c719ea1372c6e42ca8af279ec4494588a7d2bf8929d05e66a339b45ad603be8b4545245d070b5984641738fa1e9ff31d6de11ffd6e5f1e98e3c3b03dc31b9d266df2a4cb6574682a0066d406aaf81c3e49f5a86b89bd1fdc6466ad2e4a8c71da95db0aad031e1dcebd613632febe439199a67e3454a1622bc0b0344b4969b5e2ffe905f2c6f178e1da9f83d4c771f5b1c5fd9951528dd4079a2eecec7d30bbdb50ea7b0d576ca41d54974e50b5fc135b9462c2393300f9e0d3307bd1c3c51b2ea624fa7f735a15e52eff4299456dcd3c78e8af498cf0526b5828ef0e9d50cb42189fac0c764bd518740d8dd10cb1d92bab0fa7ee05120690e644602e3326d911f900a05002832b332dd171ae030200bc5d3b23ce656e461a1ec405aad1e0496c386664ad644014de2b74bd523e3e46d02c38e722e1f121896f06595c6174394a9a61d19ef7afd27d0baedec283f5973b6fb133748e72a0dd460566327c894642c3403839b27729a5c4bfc6aad33fe5148035e44ea2b0bb1ead19e10afc8d26e95c9a5c157bd44e23bbdfe6f3800442f5ba524e2bff034b31abbcf635c5a815feef1f43ad507f4f04d731b97a748a821211831466866deeac32b22bf1d31e5bb77186b7a5ebe3de9de34237f7da7e68eadc31df97101ba85b699b156f5ab0a132760c1e1299cdc56cb634195e0e1202b8504885d324ef040e8710cba652a45a98361baeda77a39d37cd7e71a4c121d71936ef17ad36ce16f896dbfa273ca88ff87422b3c10b941a7551514656c5184c8192173dabf452b0359da256d22b9963e8f12473fee5df9bff29dce9354c196e08d746c24a2854e77143b85d89c5dc585e4559d4a63b62af598c6da43a8bb211fe1582c9521a10eddcdf790aacbe91bb2a69b492eb59fc451f35e6140f9aef9a94da6c97ba749a7d21f76c0daa0f1d2aa0f85f2da3a0572d4b987fb3913dd1d65ff4878add5a605bb37b845ff3f6f65527ed2c302784a42cac0d68f51ab016aff56dffcb0c475e1f9f5e278d8151906168d3d2349688990d82faed6fecd1507267300f5d60a07dd56f8b9320969ec9ed6392cb45ed3fd8fc58a5d57171a275ffef0b0844d1db7194707849503569ec507d3e315e8b075ca335f7e9753f9509d508d1137c30c15e0f62ae305fd3b7905a65114e13a3e7d96b24332b836383f4b50ef8a9127900fc6072438a0b2c5c253b670987a6d4cd43980552c566609bc698b58979283a14817cbe1d8208762ad51e5a648a203da22eef19419cdb48eaf561d76340d774ec8b75a4258f428583d43a34f6ac0b9f6a570788d0d63e91af96589a622bc3ac26413473510eb2302a7424a9a02cc13d4484161063423f3323dc0ae56dc17ad2d83fb2d9c5fe73e1a7d6f00c8fca0536e08581cb6f351b1d9594861bbb120e2399c3caa93fe1233584f75f518673acbdefff72bc91450da52120dc0ef6a731dc4b2e752f1ac1c744800e2d7175b2ae30c5aa1f77b2a0313aa3c2d72cbf1dc86ea6afb80cd11d48cff0363c5b04ff36060e96bab5a6c79e6df5ca58aaada7114892ebe7f2450ed1e607ee8cfb1a97739a2c9e243df0b52edc4e234e62462124dd92d44c2ee14cfc93091bbf1ce84d3a23de2f06de0f53d8dd8e7756b0619226148052647ccb986ef6d24eee62fbd73fcd54787aaf811ec49e9ef1dd017bc8e623e451c85b313e5ff47df7f4ade436d20f0ed5aab0d0f5494df24c723a2c798edb5e3250f5997deeedc4df067499f0acc4df1d5ef8cfda0e0ed1326bda69177489d16db779377cdf2a3ac0458e6ad8c5ae8ac71f6328f38251176b5743e90141072e3ba2fe30f149049b7648b92b26deb67067ca82980fec875b3ff39b6130cee58ee5496d9f403192cb152bab0ef3a45107b422a2fa40fa2a2072ad6c5a625fd673d3f64658d75e2d27e32deb75e38451118f448dc7b670745c07dd87f35f794f0bb11e9c8740fa98b8aea08c93a4bc2c3a461a3408568c81acee149030548dfb81dd91a51e6f37907dd8dc77fe85360dfdfb86a7a84efbf2eb974dd70c0e5040b9c4face299c3b10b3da58e689129db3777c672b20979eebcb06bd8e171c60f6808b83c832e97b74130096d6b44ca7210a3d4b928264b6c9e336b669b57175994044c18478025f81e30b67628674a6eed0e8e6884f660e7ec0835aa7aa3e84ebffbf3a7071db23acd53c14f770aa4e959b345c163070247ce0a65ba67aa5f9a6f6334180710be1845e5b3c83556677af7b00a0b892ba6dc7274120e6cd0d174e24d25d62842d768f117fd423e007104fc5f690879b667c7f5e03f21492b7bfcf7f96be5f4f9efb00828979433aa1904ef91b38d14cc87bae6b9fdb6f9a6c1352dbe242eb4141168cb7e939298f665a8c824c93486cacdd3d5ac6837a1f1fcdc8f9d5edcba67a3503d16892586e7fa87ceeee02fb7358688943f24caf07adf02097b3ab48681d3a98078a2395cb51304f259769932c1bc709eb79c0f868ea6137836eba073ae15b9908c199a240f53eca01caf452934ca0fe73b00ce32b7c989b30a94417b6af6a7c76b5314ede8c3d93c19a601b75bb1915e9477631610f859cc7ec29f5841f6de94bf71af5a7276ac8c4552c016a7f1ab2b6ca25a5aad9f0490d2279d82571d498876cdf9bcf82bba21534358656167e9dfa78c3bd25211e3e8b68e4d188d46b07f596bd1d3b617e30374a19565f3c1646408614da73f9971f243288c8217e5b46b3874aea534ebd1b070e854d2c4b7b46ff5555939bef4cde608882ec1fcada052088b2096da360ef583e53b57226fe910baef085b7d7cea42dfd7a8a3c7df12137f47ee053c3da3a66a1e7b39ef49ee7862c2a53ea495cc21cb73c780263ac44d2b7e1bf7daef85f231a06525636d447305698a5b09135f88f0c891deede5d64d8dca695f5c920001797c464bf458b35832433485b4f72be1f5552a304f13f3c26801e3a8e18209fda138eac6a3ae941200260d0671cb0bb1d85d9a413ca00fdce2e2cac1a51b8d131e3aac94e23f0a52be21489ca447eab615fb4b75179b353da0f60446773c6a972d77f2541ad415bbe514d37b33518646388da9a5240b074917d097a40fba9022fc4eb1b728f458297e47e07f77a9cd1ed6461196aa2ca8cb6d389359aac2f02d4f1001e528c4a2809129d44b12d62e076168da3547d27811a84e23b274816b7cf56cec742b81c5cb10354194c6726a61cb99d38f4b57156c0bf55b9ca44d5df0eb00fa924ef91070b662200df4b77e22510d5bcdc8b3aa5afc2af0725590e24d681f80c764757a157158bae43f5f9b7c3b2e03c71f9ed92bfa6ca0ea99b8e984578e88ebecbfb1aa5e7787714ef4fb3fe841ab99db5d3f202b9b4a1c595e6c27611e87ce0c4b874bddb015828a2ecf97a760b6168a8a0675a6d30e30607d83035c17b3a727a9fac9b4040d143fd108e959cdd0344af969d42d946e45f2e0ddcc99f8a35196d03773ec722a4444144b624a9ad109d5727ccef67703d9aa32ca21622eab72fe930c4f58a90be56b8eaaa7bc9d298f2cd943fcec63fd8b62f5daa2a8f6cecdf6ab378073f5f6624ce673afa482ef035ae0ecfe40bedb75809823da4a206b9747ffc70bc1642e1990723466781ac1f63fee4c18fcd6f9fa4302ad02088d657d3db2c4654a04856eee40d3c12511c347a67689f95d605df721e206059bb667f3110d163bee9faa457f65dab5f81e0fae26b10ddc297a6f6160d4e72ce04e660f0720d0448ab6f65430b9e75cf0f3fc74b4e2991415461071148b2f4914edacab6f3ee239b9da58c3288c5f7859874702ba1a6b62ca97acee9748cea921449374e2de0b69fa3a9adf11fd92b629343adff1a6ac1956b733cf60d127699df62eb348e0c53bf03e14a72094e8e01cada4c30e33d0ac465df08221d526d81faef1436341952810bfdf31dce93c1230529bf3d8fef54f500b9a051ddc0870fe553a17f7b2096a45203e531e4db7f9215cb616c3efcb354354bed8dc819f84777affeabbe26fdd42d1220bd172090e6be2c2ad50b5c36cb36db7faef59bcc92e1186efc86c42992f9ff523698c44d19e6e46b34b26792230493c4f92dd55c5b5f2b05da83622c33f49876319dff7393a3c1c2fc3b17bcc6f7b284ce413074f7c71ba61ea2ef70b6dd02a50d0b0086b7718b5cb494869dca55ac5f27b1111b607e17234c16bc4cada5209fae39288b7ebcdde6fd122ff37044557f43e7d25f3d4b102462b79f289ca6b39befe2f68ceca540db93e4f566b0efe6e7524a39844f7d054cb6c09fd85b053722f532abe7fa5efe23c3dcc16c2bd7f05d111b9b5d50bd3a332c31071e2c17b4fde19683f530bcf5f108a7481ffe248fae885e96e1928cdceb5a9cf3f24de4e3a296787285b21a00a2bc4fedf5b403f5c8400ac15b20439b0b95987363762aad004e06309604c1d15e0cfb56a82580a1475bc8c678ff10a058db212313a875e62cdc2c743cedf77e9f04cf44f1e9a3844cb65c6e1ffc69fb95ae18817c5d1f4e9168db8d42c613fb861d87328556bcac74c32d6b6a321df0bc6d86083577c509f445756c709d5169099e5ce48ed4449b469cecabf690552dce58fa1678aedfb9988ad25da15e6d125b728c58e07d0dbdd4e4a2d797dbc76ff7cf720880f4667c19601841cf2cb3ed20fe6d86bc71c5d42097822d4e0c43863c41b493610fd575f16cfa470df0945b395d9702ac79af44bb0af41d2dd4a3a83a7f04fb0713df7f01a7c6dc98bc7cd90dde87a7c8581ced15cff8d5f470a13e46d6d5927f01b1f70396d3dbe4504a02c89b74ed68742fcb0ede0e9d407b686350d92d81fafa3965e33c2738688eba820c97d7e47748f45373e4e614bba49df62a4d3bcd191efbc44163d6fd44ce2894c0a0fa5f4ca") (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) (async) syz_open_pts(r1, 0x8000) (async) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000011c0)=""/114) (async) 22:06:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0xff, 0x2, 0x0, 0xa, "7239395e84bb6759"}) 22:06:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x3) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000480)=0x1) (async, rerun: 32) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x145, &(0x7f0000000080)="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"}) (rerun: 32) 22:06:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/223) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0xa6, 0xac, 0x4}) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:54 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x28, 0xdc0a, 0x5, 0x9, 0x4}}) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 64) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0xff, 0x2, 0x0, 0xa, "7239395e84bb6759"}) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0xa6, 0xac, 0x4}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:54 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/223) 22:06:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) (async, rerun: 64) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) (rerun: 64) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000480)=0x1) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x145, &(0x7f0000000080)="46407e8f351370255a7ef77a2cbef3e4a356a221c2cc306623fec65dd897b88e65d10ccd9a28a26e142caa92032223efeb38e23cb19fb42b0087e58d0b57103b87d64a7108ea2cd83911c5b79dbc393f53c7825b0417724da15f355fa06bde1c113e426192f2c57abdeb8e0896e7b6c2d8d82a116ed400a587c4f5a1790671b5c9f5305f32872c8cadadbedb97e20c68cb327a0be323be99a705119776ca3a750e335c178adb9f536e2faf083f800a96230b97e8110613ef7535d25bd1a1382156045d4bbf77f72dc37dd16799abfb2a0f77bdb1491c08815651bb46cd882758c5594344dd5d864e68a972ac9025c121c8b12955f7e38e8f259571d705c644b582dadce909ac2ba3832fcf7111c3939855ea1200182c394113e15c047acaa253bad07f323cb8f875faf6fc69cd480168de76314eeabd84098c96354edf2a39205dea693b4f091ef45d867aa5091f95b99fac1f3178853509cb104df354ffb16908e604b3fc3505e3d4a4b470374483eebdf618c73fc1a6ea6a529253178820e4b7753ae270a2bf8f2449f0115047c04745326e51d266144b1f325281870f8bc18daa9cfdea09a7b8016aa99bb14b482746b737b83221237b9fffc28b1680e84fc1f4cdd55d2028e330c72b6ca196b846b5ac1dc5b25d134b402d159ba21c24f2b0b4b27415ef5463138e9daca32afe3081e1460eaef507c1493fecba8fefb6f36605ba1f8c303431c5a9263382c6597e4e1eed0f0c37dd9735d40d1feeaee81da8c91e127051a6db45076b063304ec07ba4b107616b98ceba58bb2b743bf84447f5db2b02aa4b0eebeba41e605674b8aaaddb48d3f136af52c1c4e63230b5fdbfa1e3c5544e8ab9088c38b7ab248e454bfab08c77f2d9b29e29a018d08f0d2e8bfcac4b3f0e12fba1715e496763b780b1d99b2ec8224cdbf170ad6fc696083471d8fa4763bfe3f4d5ce5eaef3ec14edf880f05a1145c56491736c949068f685a658918caabf89be1672e075972cd42c028eb063ba95ec5afa72669a472124c823ce60b504cdfe9c1f9fe09ac7eae84ef252bbf9698d388fb6825261376dda00d63ddf9d1ea4e4976f0f8482c3b9985dafefdedcb26a020aa679805f7d4bbe8b082ab6aac870464a015073ca7cbead9f895667b672f78d2fd2d004e388e5b5db160fd90eed49c08f495173843dd05e14cf5a9b3aa94b933d584309247ad491dcd6587c7bd396ab7ed25fc8d5f26b6a4b4c60d1f54817d2abe71e5c70545549b9e243fdd447f78a2961fde04ced60959b15ff119af7174eabc514c63c4c1af5bd6f686d501f6a0192b4691b0e01bfe1a23f43dc01cfc70080b5eaad93fefef2a57c58dc202d6193f2bedcca7018e897e25517e50578b52e20633fa821fe193b2fa3663cd76de68ede9f99837b9ec335991b4aa37deb7612a09f44b8090bc096f11"}) 22:06:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x28, 0xdc0a, 0x5, 0x9, 0x4}}) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffc1}}}, 0x38) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:54 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:06:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/223) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/223) (async) 22:06:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x28, 0xdc0a, 0x5, 0x9, 0x4}}) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) (rerun: 32) 22:06:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/134, 0x86) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x591) ioctl$FIONREAD(r0, 0x541b, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x280200, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffc1}}}, 0x38) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffc1}}}, 0x38) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) 22:06:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x280801) ioctl$TCSBRK(r0, 0x5409, 0x7fffffff) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDENABIO(r2, 0x4b36) 22:06:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000240)=r1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x21) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/274) 22:06:54 executing program 5: ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f00000000c0)=0x7ffdffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)=0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x8000, 0x1b, "2de7ec1e927870ef"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) r3 = accept4$rose(r2, &(0x7f0000000180)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) sendto$rose(r3, &(0x7f0000000b80)="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", 0x1000, 0x0, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x47, 0x4, 0x6, 0x958f, 0xe, "04c198582b963f59"}) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffc1}}}, 0x38) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/134, 0x86) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x591) ioctl$FIONREAD(r0, 0x541b, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x280200, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/134, 0x86) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x591) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x280200, 0x0) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) (async) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) (async) 22:06:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x280801) ioctl$TCSBRK(r0, 0x5409, 0x7fffffff) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) (async) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDENABIO(r2, 0x4b36) 22:06:54 executing program 5: ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f00000000c0)=0x7ffdffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)=0x5) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x8000, 0x1b, "2de7ec1e927870ef"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) r3 = accept4$rose(r2, &(0x7f0000000180)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) sendto$rose(r3, &(0x7f0000000b80)="10e465130edf09940108278830841665629e80f02a8b1d68c019706bebe846c7e4d1b159e0316610cbf06e9f09e4123713784bdb0083657a148742faea3d1109b44b9a76e9091633d90ce34ae0096a55f2b91722ecf9f2770abb578ed71c6e30bf664412896698b25cfc4f3b8bd53ae55f9841395a0aad88969128640d0447a406ff7e48098a6186a872f88a36f8def563919c717e9cc5e9de81fd9202fd03ba45d1caef9ddfc470e182783eed5510cfdd2f4200cdabc7384a7ed786f5b0b0905c77b10302325df1e4fe7c6cacbd9239a814958d280016c785193ecc33df42910bd53cc6f18beb902febeacd68c8444709bf077ac68dd80fa28971c24bbd3fa7602343ba41bbc0897c0d6cf3d066f9f7a7c0c3c6e650458b1ca57e4009bb2ac0880e966c7674e493b0844f87c60c7a81650160f973a55728329d25e6a78b8fd7dad34e9735b0b2e167f2684523bb2d48efaa59c7019f67d7d242d3e65959ba3125dae71de83cf773c5188bdc2ec12f87f4ff10670b58ead0da7b5819f20fcbf6f3bd0062883a696d2d1ab8bfac22dc50bad8d40820ab755df07ae4e1e9fc28126c1b9019a7b41556586713b1a498f06ef8b19cc5df24441ba5330fcc6ce92d8ed63ea60cd98a40e3b10e6aef374f85fcad20093df07b02d98314ab6c512ff8c0219532270698eff2e952fc3a86d11982124ace6f2a1b3b746d70a3e108b8de65106b4e79549d08c964fa650067e9ba0daf1ad296f0ae4dd37c26553a063173d27df89dae052066c2994715e3b66977e5c156daa92ed0a54e591a9086cbcbcd13d99097a05342b4e1b5529781a8d11599ebd781d2c502a31a03f8253c0571843e2d54bd67a70b3468dffaca036a6fbf1dcfa5ca12a806a5b88d358477c575881459a558f1987268b5c1491a61fe0446de6f3e9901e5edb57df56f15a2fdbe2c919c544fbd1237df4e69d3c5c4ea54511bcc833d7c13992c1f11aff6ebce13c9b0d43dc3252b77d6a018f46e9ba2a7cf8d27177700168712d775d97278f37ef38cfb2b6912c75202aa4c7c9fe2642f255b51bd07b0c3cb82ce73e6e5fe378a8b5f53dc396c4eee8b1cf6e5ae90361888bb94536c1b241cd653483b815ab0177a1784601ed5c94da031d1f99301f8996b1ce61285c6ae1be8ecdbd81348c3f8fa82bbfd1ccc341961d53a44e8f84f0f13d7d2e10a5d2d2c52566b2714e33fe77876bd2f91c28d868c1f276febf5a3fe682bfff01ba4b8ed96500d5e3ad3be9430472b661140868d99553cdcbd4b833ff6ee15ba9fcb96f09a9b52e72fc2ed8edb20b1bdd6cfb198cf1c705db5395e2a071b3bf61c505d790eb1903dba1e1da58576f5b4a126b80b0df1389d8c25adfe9bbdafe4a4cf7d1648b01b700e61aa6d9ec24b2779ff3b7ff43ff12e991f9ad0cfad64d03489be3caff225305d88de8d429176e1d7ae65d922db358798899728f88410efa219909309315006b21b7a64a75ef93b5f45a565ff8761b22ab9aa361427378d9e0e50cb2724457d65e530f0598cb1183a8b5f9e0ed13fd8129a1adc7a0ccd896c47e7708dcf45dd25f0b12d752443205b5ffb36f5b650d0277bccfaf4279190c58271da5908467caaf12716d1e6239c9f21c41faf30972342f03d367af19e060f3f112cdcf36fcd6388165152d07ead5af20e4ad250edea69d7930328c7f832909bd255b2d215969abaaae3693470f95ec45b91e2eeab5a40248dddc2551cc0c74a2c5dc39a27bc15519a3612f46308d53d41e6cb09fa36d10d66f14c0d01e4295fedf0fde9af06d196ddc6616c02b48e47c09d8a19c6eaf448dc30a80e15b45deb4791f8348b2c73669c60d8ccc2d314cd9066332125bfa154c249f1ce76713b75ccb83c7561d42a1e389dc21053a0a06561527573a0e45fc915554baa4ab8c9fe57e16c81b824d64924a53bcee906f5bb35728d84b4f46d5c083ae90a77b03b807bd18a3df2d22bd89346117987af658ecf110c2b01da7ea28a9332b7f8a9634e3dad0b8b08ab6b05e838b935eebad244597201163857c6b298292924b1890a881f60a13d7802cea8bf0b79e6f689f51e225e74d942008b3db9130e68258b9d16b1f2e1f04de62effb9be24eebb2d014ed7c6b20077e4079890912428ae02d36c2edc811ef129f8be9b4212fecbd7b3daf7bd0d6d47643f2fc1e5e29c621f05ebc1cf4f1b56800912ed62a79ec3b6db16f6558331d217512064371e87b166a392e4d9174f9234204cc2600c3cf6ef7177f5c1f82ea3faf3c5ee074b27e187295ea210449aa4fe6d3e5657e7c28c22662ed77abda20951ae6e711c2a4bbd8b1f854e3fa3dd8a660fe7c1b099e345d6f5e1e57b58ebf01c8bd50fa86e480725beb65af73551a866bfae93e31fe3d03234c3ed4b7f4b631a4686e1634586bf5b01b9b5e74147f35e4878e00e4d6d440ce905bf1417f20ea07e9ba2b4320a76bb0c66f97b66bb56edf2b3548af93205c4ad6236602279138fd66c3533afc3f4cb6c127ab3ba22cdda6d1deae361a3d509f5e2b6012d6f095a018cc1c3090a305b73852fa98f2204e11eea122b195295c0e3607da3bdfb7697a497efb0b7c35e8a000774b9efaaede769ec56772b818f87a4e578afe311856441873d0e6d0d211f4f5f68f2aaa7357491d18c4f744edb70cfe9fc2d2a0a859846496efe66fc76ea0daebfd0ae48cf7cb74ace49e9ec1fd259b0ec8261c99d2cbbd131b27e0f55814cc29922f1bac01b3bc373d2b8c1e9a78b1f09cf6bd536072fd404de8e6a9c99308ca55acc376f3a646a2c1d312e8cb417372c426bf63b60ba50b2ca18c41d808c65d7495209c4397912e2b32dbabadc4adc7805a66795d4907d468641f1db6912ea0f42ec2a257f94bfa4ee699e7ec610c6857cc9f27a938d05471307122ce0911543583fa672d702c0973ba9ff94267a95e3a483d223901fd7fd21933fde33d794535f940be1a4965d55149e73f05fd8d7ce27b9678ef580fa7d7ba0da8463f3d2c1facdd43a7e22dcc9500c38e5d5f9471c7560f10c75a452b76eecd66de05c90b94c48818a8eab34ab159c29b35100030342018060219d1c82edd19b53c3653d8903d2f4fdbe787e323def74ffc6f84184915094b4b4e029cbbff99a4913062d304d6a0fd3a345862beba01a8c02c7080662fcd6891da8d6865669efb9ab3a6677d020f55d4b487b014bad5e9b136172e1303542254f0f88ba50fc34e07992a4d3ad574ece54832361666a1124102c00358e8d50456b057623e97428f98080c5adc7c3bc50c20c6d1494814c1f15e650295a4a4d46f072a574ca4520bba08d73114a5fd9bf15437362f65399038b950df575d9a89ab811cc9104d7923e5d71528a88498741fc136addde1e75e37a46aad3ef6ad72e3c0be4a0d25b3d94595a29f1ac9864d32a5fb67ed0c182975141d9347747be182f259ae463d9fbb3b35975bdf3ecee68c90df494ae6e6022f7a8deec6c1458583e45b68da04b11934e2660332e39860846866c783f0dd40a18fd035a5a58efa71aedb48591e8170499b187d8b4aacc52416877206f4389c2125c26e8d99abe21191c792e7f5a02dfe8d6fa94d2eaf55e6013835a7311e5dc6c989c743e838d56fe288702efd106ab559cd25a02c6fd8aaad63194541701dd11b7ad0818beff1d0b13be372c599eccac7bbd9a7c630e87bf025459a28500fc067c0579b7b1f5ae50938afaa3e82f021676a54fe1a0fe272f77b5bbfba356594f24f7cf547bc31bce025a7ee5f14b56758f89021295dcae31fca31f4ad2ef640fef3ece747ebbf4f3025cd8110f9fb56ee59438c8822863af8d7aaf82d6ca5a8c8b289c765b7be4e8c48b6f3488f3c416c969d8ba414fd67a1b0e069ad931e68d9542d6932045fbac993ddb65167bb566a9b64fa3dbe37d534e99c922bb9b69059db5c9d9350aedf05deb64f10b964c274fe52abacd977c9a974fb71ef459c9d7295a8ce5669faa3e8ade42530d5bf8e399c9e9de4d57319b845473a30a5d09735da23456d84f1b33805c88fd44d1ad18772f7d290e1b4a6687140ae58af5b12d1e5cedcfbe895e9648bda555d666798faa4fb3d00680493173f4f165b50c3f2f16ab34dc32e56a2da59a9f2f249cd6da14d1be9311cc86273c16efff3110603dc5b9e34d60dbcd21d7716d656b8e8ff18201882e4e3ed1376765522baa132b4b7bdb0911711ce0747b1e7f87151427cbdf16b1e6fe9c77f753a1698eaa6c6d0ac19d594391708ce25fbce161d86d8a41b787ee6ef8f3705b63170e9ce7adccf63fdd2d9761f413a3ed33fca31d6f4ec37b5aa9b6c89ed4fbe4f299d3522d8df4053c523e1225d6c25025ef022f87a8ef385d88c56b6ee530ab031e50281773f5e6f42442cef5721f5009e65bba0ff7bbfa3556df232b9083aaa1cccb8606e3093e600818e7303567dfb69365e76add8728b32ed8c51dea7219a230b63bb3d2122b1f8e375e5c7e72b976e4c26b6161db0170aefad9bc90405e3aefb63102ae8e871de97c922ed899e67342499efdbcdcfa6035465be79bd0753013f36667940bf7fcb83a23fd8f64c261093b5aad29a1f0cabdaa10984c582a361a22dd6f634bc2ae6a2caa1a6b7952d1865ad900e1fd93c4b0ee1f40a188857f07b4513c7c7a7f85fb6d29ece772b73b281d3b9d1bb28b78a6afc0c5a3a01d9db6d26d77fbdaeb18d10432ac869886542722c61644575edef6938ee9a0f2d057bfc83316153e320ef1a90a671b7e6d866834cbde7d1cab3697ff254c48c1b8192ca1f624159470c30e8cea111bee6e0f92d761d32d33ef691bd6b064cacdb696d587bfb14207e2b49894776f5b74515cf63d1233966cdb15fedc8e90f802c72c19ee1f75d4bf7d36c7864af4f0119de7373387de1a25bd0546f898dd945fadf159cd3f4f2bdb38e82ff4cfba7ee38d1a85ea59e0f73f5baacdbfbb6d2e0258b3c6be4799dc404d24a7ef8f7bc6f2f3c9663ebfb34a781d81417bf93041a79041d1b86a3a3da7b6761110caec6178faf2e57242e02eff7b08b34aacfb244ed80a67d33167e8968d958917cca03a1fbf9d24cce79543daf09cfecfa1aaa4d93af0e2d18e332105f5b72188031acb00afb2b99836be57ccc5217ce99d7bc27f957b2250e198d5bdfad9cdf9f438ef36f4b5bd491045e790ee1a7ad72abf0cffe108e2e505efc7336f41a82efb87261bf2a699040f67a07a646a7a04035ca007776fac1f5485297d600058ccd100af480cad87d4fe1730cef4d416eab1db789bb26ab2be3a6be75986c61d2d28cd447415415640381dd7538e66c1f511ba2c9786bdd1c09d2bf2235eeae12b1c39e0e7783c763220a975deb0fb1f81ab20bc252ce28097406d41d19507fed4aad1c9281bd28b6fb527163807ebbd6df766bcd7a80de64bd9d7ec25fc3443d6473b5fe6afe145c1815b08d9614a3f9ab018f96456d9bf013b4be106895bc9a9e90c24f6abc14abbd27031b4c9a5a641c8a5a3507fb6670ad4b339d651c18ea6d684ee79babe995eedfc4b6035a0888dbf97d90dd3aa882ac10c1fd2a8bf1eac84b1579254082aa8fc4947261266d536189b79f772b26fcc1b24a5d2895613856b1fdb0d8de0a477fed2a2d5b3f8007d191ac26862384e7ef813aba192036100fbcdcae7aa45421491689ed7c2a19ccd92f39afb0beac915f17a24b90827fa38656c2e7df37dfbe4f43398ce385dc670bc143ca714922b96a8f468f315788169759c31590c641608765a93ffd7dcff96b13f31771974a0cabfe0", 0x1000, 0x0, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x47, 0x4, 0x6, 0x958f, 0xe, "04c198582b963f59"}) 22:06:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000240)=r1) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x21) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/274) 22:06:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_open_pts(r1, 0x410600) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)) sendmsg$key(r0, &(0x7f0000000000)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x17, 0x0, 0x8, 0x0, 0x0, 0x70bd26, 0x8}, 0x10}}, 0x4040015) 22:06:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x280801) ioctl$TCSBRK(r0, 0x5409, 0x7fffffff) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDENABIO(r2, 0x4b36) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_pts(r1, 0x280801) (async) ioctl$TCSBRK(r0, 0x5409, 0x7fffffff) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) (async) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDENABIO(r2, 0x4b36) (async) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000240)=r1) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x21) (async, rerun: 32) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) (rerun: 32) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000100)=""/274) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/134, 0x86) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x591) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x280200, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) (async) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) 22:06:55 executing program 5: ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f00000000c0)=0x7ffdffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)=0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x8000, 0x1b, "2de7ec1e927870ef"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) r3 = accept4$rose(r2, &(0x7f0000000180)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) sendto$rose(r3, &(0x7f0000000b80)="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", 0x1000, 0x0, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x47, 0x4, 0x6, 0x958f, 0xe, "04c198582b963f59"}) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f00000000c0)=0x7ffdffff) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)=0x5) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x8000, 0x1b, "2de7ec1e927870ef"}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) (async) accept4$rose(r2, &(0x7f0000000180)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) (async) sendto$rose(r3, &(0x7f0000000b80)="10e465130edf09940108278830841665629e80f02a8b1d68c019706bebe846c7e4d1b159e0316610cbf06e9f09e4123713784bdb0083657a148742faea3d1109b44b9a76e9091633d90ce34ae0096a55f2b91722ecf9f2770abb578ed71c6e30bf664412896698b25cfc4f3b8bd53ae55f9841395a0aad88969128640d0447a406ff7e48098a6186a872f88a36f8def563919c717e9cc5e9de81fd9202fd03ba45d1caef9ddfc470e182783eed5510cfdd2f4200cdabc7384a7ed786f5b0b0905c77b10302325df1e4fe7c6cacbd9239a814958d280016c785193ecc33df42910bd53cc6f18beb902febeacd68c8444709bf077ac68dd80fa28971c24bbd3fa7602343ba41bbc0897c0d6cf3d066f9f7a7c0c3c6e650458b1ca57e4009bb2ac0880e966c7674e493b0844f87c60c7a81650160f973a55728329d25e6a78b8fd7dad34e9735b0b2e167f2684523bb2d48efaa59c7019f67d7d242d3e65959ba3125dae71de83cf773c5188bdc2ec12f87f4ff10670b58ead0da7b5819f20fcbf6f3bd0062883a696d2d1ab8bfac22dc50bad8d40820ab755df07ae4e1e9fc28126c1b9019a7b41556586713b1a498f06ef8b19cc5df24441ba5330fcc6ce92d8ed63ea60cd98a40e3b10e6aef374f85fcad20093df07b02d98314ab6c512ff8c0219532270698eff2e952fc3a86d11982124ace6f2a1b3b746d70a3e108b8de65106b4e79549d08c964fa650067e9ba0daf1ad296f0ae4dd37c26553a063173d27df89dae052066c2994715e3b66977e5c156daa92ed0a54e591a9086cbcbcd13d99097a05342b4e1b5529781a8d11599ebd781d2c502a31a03f8253c0571843e2d54bd67a70b3468dffaca036a6fbf1dcfa5ca12a806a5b88d358477c575881459a558f1987268b5c1491a61fe0446de6f3e9901e5edb57df56f15a2fdbe2c919c544fbd1237df4e69d3c5c4ea54511bcc833d7c13992c1f11aff6ebce13c9b0d43dc3252b77d6a018f46e9ba2a7cf8d27177700168712d775d97278f37ef38cfb2b6912c75202aa4c7c9fe2642f255b51bd07b0c3cb82ce73e6e5fe378a8b5f53dc396c4eee8b1cf6e5ae90361888bb94536c1b241cd653483b815ab0177a1784601ed5c94da031d1f99301f8996b1ce61285c6ae1be8ecdbd81348c3f8fa82bbfd1ccc341961d53a44e8f84f0f13d7d2e10a5d2d2c52566b2714e33fe77876bd2f91c28d868c1f276febf5a3fe682bfff01ba4b8ed96500d5e3ad3be9430472b661140868d99553cdcbd4b833ff6ee15ba9fcb96f09a9b52e72fc2ed8edb20b1bdd6cfb198cf1c705db5395e2a071b3bf61c505d790eb1903dba1e1da58576f5b4a126b80b0df1389d8c25adfe9bbdafe4a4cf7d1648b01b700e61aa6d9ec24b2779ff3b7ff43ff12e991f9ad0cfad64d03489be3caff225305d88de8d429176e1d7ae65d922db358798899728f88410efa219909309315006b21b7a64a75ef93b5f45a565ff8761b22ab9aa361427378d9e0e50cb2724457d65e530f0598cb1183a8b5f9e0ed13fd8129a1adc7a0ccd896c47e7708dcf45dd25f0b12d752443205b5ffb36f5b650d0277bccfaf4279190c58271da5908467caaf12716d1e6239c9f21c41faf30972342f03d367af19e060f3f112cdcf36fcd6388165152d07ead5af20e4ad250edea69d7930328c7f832909bd255b2d215969abaaae3693470f95ec45b91e2eeab5a40248dddc2551cc0c74a2c5dc39a27bc15519a3612f46308d53d41e6cb09fa36d10d66f14c0d01e4295fedf0fde9af06d196ddc6616c02b48e47c09d8a19c6eaf448dc30a80e15b45deb4791f8348b2c73669c60d8ccc2d314cd9066332125bfa154c249f1ce76713b75ccb83c7561d42a1e389dc21053a0a06561527573a0e45fc915554baa4ab8c9fe57e16c81b824d64924a53bcee906f5bb35728d84b4f46d5c083ae90a77b03b807bd18a3df2d22bd89346117987af658ecf110c2b01da7ea28a9332b7f8a9634e3dad0b8b08ab6b05e838b935eebad244597201163857c6b298292924b1890a881f60a13d7802cea8bf0b79e6f689f51e225e74d942008b3db9130e68258b9d16b1f2e1f04de62effb9be24eebb2d014ed7c6b20077e4079890912428ae02d36c2edc811ef129f8be9b4212fecbd7b3daf7bd0d6d47643f2fc1e5e29c621f05ebc1cf4f1b56800912ed62a79ec3b6db16f6558331d217512064371e87b166a392e4d9174f9234204cc2600c3cf6ef7177f5c1f82ea3faf3c5ee074b27e187295ea210449aa4fe6d3e5657e7c28c22662ed77abda20951ae6e711c2a4bbd8b1f854e3fa3dd8a660fe7c1b099e345d6f5e1e57b58ebf01c8bd50fa86e480725beb65af73551a866bfae93e31fe3d03234c3ed4b7f4b631a4686e1634586bf5b01b9b5e74147f35e4878e00e4d6d440ce905bf1417f20ea07e9ba2b4320a76bb0c66f97b66bb56edf2b3548af93205c4ad6236602279138fd66c3533afc3f4cb6c127ab3ba22cdda6d1deae361a3d509f5e2b6012d6f095a018cc1c3090a305b73852fa98f2204e11eea122b195295c0e3607da3bdfb7697a497efb0b7c35e8a000774b9efaaede769ec56772b818f87a4e578afe311856441873d0e6d0d211f4f5f68f2aaa7357491d18c4f744edb70cfe9fc2d2a0a859846496efe66fc76ea0daebfd0ae48cf7cb74ace49e9ec1fd259b0ec8261c99d2cbbd131b27e0f55814cc29922f1bac01b3bc373d2b8c1e9a78b1f09cf6bd536072fd404de8e6a9c99308ca55acc376f3a646a2c1d312e8cb417372c426bf63b60ba50b2ca18c41d808c65d7495209c4397912e2b32dbabadc4adc7805a66795d4907d468641f1db6912ea0f42ec2a257f94bfa4ee699e7ec610c6857cc9f27a938d05471307122ce0911543583fa672d702c0973ba9ff94267a95e3a483d223901fd7fd21933fde33d794535f940be1a4965d55149e73f05fd8d7ce27b9678ef580fa7d7ba0da8463f3d2c1facdd43a7e22dcc9500c38e5d5f9471c7560f10c75a452b76eecd66de05c90b94c48818a8eab34ab159c29b35100030342018060219d1c82edd19b53c3653d8903d2f4fdbe787e323def74ffc6f84184915094b4b4e029cbbff99a4913062d304d6a0fd3a345862beba01a8c02c7080662fcd6891da8d6865669efb9ab3a6677d020f55d4b487b014bad5e9b136172e1303542254f0f88ba50fc34e07992a4d3ad574ece54832361666a1124102c00358e8d50456b057623e97428f98080c5adc7c3bc50c20c6d1494814c1f15e650295a4a4d46f072a574ca4520bba08d73114a5fd9bf15437362f65399038b950df575d9a89ab811cc9104d7923e5d71528a88498741fc136addde1e75e37a46aad3ef6ad72e3c0be4a0d25b3d94595a29f1ac9864d32a5fb67ed0c182975141d9347747be182f259ae463d9fbb3b35975bdf3ecee68c90df494ae6e6022f7a8deec6c1458583e45b68da04b11934e2660332e39860846866c783f0dd40a18fd035a5a58efa71aedb48591e8170499b187d8b4aacc52416877206f4389c2125c26e8d99abe21191c792e7f5a02dfe8d6fa94d2eaf55e6013835a7311e5dc6c989c743e838d56fe288702efd106ab559cd25a02c6fd8aaad63194541701dd11b7ad0818beff1d0b13be372c599eccac7bbd9a7c630e87bf025459a28500fc067c0579b7b1f5ae50938afaa3e82f021676a54fe1a0fe272f77b5bbfba356594f24f7cf547bc31bce025a7ee5f14b56758f89021295dcae31fca31f4ad2ef640fef3ece747ebbf4f3025cd8110f9fb56ee59438c8822863af8d7aaf82d6ca5a8c8b289c765b7be4e8c48b6f3488f3c416c969d8ba414fd67a1b0e069ad931e68d9542d6932045fbac993ddb65167bb566a9b64fa3dbe37d534e99c922bb9b69059db5c9d9350aedf05deb64f10b964c274fe52abacd977c9a974fb71ef459c9d7295a8ce5669faa3e8ade42530d5bf8e399c9e9de4d57319b845473a30a5d09735da23456d84f1b33805c88fd44d1ad18772f7d290e1b4a6687140ae58af5b12d1e5cedcfbe895e9648bda555d666798faa4fb3d00680493173f4f165b50c3f2f16ab34dc32e56a2da59a9f2f249cd6da14d1be9311cc86273c16efff3110603dc5b9e34d60dbcd21d7716d656b8e8ff18201882e4e3ed1376765522baa132b4b7bdb0911711ce0747b1e7f87151427cbdf16b1e6fe9c77f753a1698eaa6c6d0ac19d594391708ce25fbce161d86d8a41b787ee6ef8f3705b63170e9ce7adccf63fdd2d9761f413a3ed33fca31d6f4ec37b5aa9b6c89ed4fbe4f299d3522d8df4053c523e1225d6c25025ef022f87a8ef385d88c56b6ee530ab031e50281773f5e6f42442cef5721f5009e65bba0ff7bbfa3556df232b9083aaa1cccb8606e3093e600818e7303567dfb69365e76add8728b32ed8c51dea7219a230b63bb3d2122b1f8e375e5c7e72b976e4c26b6161db0170aefad9bc90405e3aefb63102ae8e871de97c922ed899e67342499efdbcdcfa6035465be79bd0753013f36667940bf7fcb83a23fd8f64c261093b5aad29a1f0cabdaa10984c582a361a22dd6f634bc2ae6a2caa1a6b7952d1865ad900e1fd93c4b0ee1f40a188857f07b4513c7c7a7f85fb6d29ece772b73b281d3b9d1bb28b78a6afc0c5a3a01d9db6d26d77fbdaeb18d10432ac869886542722c61644575edef6938ee9a0f2d057bfc83316153e320ef1a90a671b7e6d866834cbde7d1cab3697ff254c48c1b8192ca1f624159470c30e8cea111bee6e0f92d761d32d33ef691bd6b064cacdb696d587bfb14207e2b49894776f5b74515cf63d1233966cdb15fedc8e90f802c72c19ee1f75d4bf7d36c7864af4f0119de7373387de1a25bd0546f898dd945fadf159cd3f4f2bdb38e82ff4cfba7ee38d1a85ea59e0f73f5baacdbfbb6d2e0258b3c6be4799dc404d24a7ef8f7bc6f2f3c9663ebfb34a781d81417bf93041a79041d1b86a3a3da7b6761110caec6178faf2e57242e02eff7b08b34aacfb244ed80a67d33167e8968d958917cca03a1fbf9d24cce79543daf09cfecfa1aaa4d93af0e2d18e332105f5b72188031acb00afb2b99836be57ccc5217ce99d7bc27f957b2250e198d5bdfad9cdf9f438ef36f4b5bd491045e790ee1a7ad72abf0cffe108e2e505efc7336f41a82efb87261bf2a699040f67a07a646a7a04035ca007776fac1f5485297d600058ccd100af480cad87d4fe1730cef4d416eab1db789bb26ab2be3a6be75986c61d2d28cd447415415640381dd7538e66c1f511ba2c9786bdd1c09d2bf2235eeae12b1c39e0e7783c763220a975deb0fb1f81ab20bc252ce28097406d41d19507fed4aad1c9281bd28b6fb527163807ebbd6df766bcd7a80de64bd9d7ec25fc3443d6473b5fe6afe145c1815b08d9614a3f9ab018f96456d9bf013b4be106895bc9a9e90c24f6abc14abbd27031b4c9a5a641c8a5a3507fb6670ad4b339d651c18ea6d684ee79babe995eedfc4b6035a0888dbf97d90dd3aa882ac10c1fd2a8bf1eac84b1579254082aa8fc4947261266d536189b79f772b26fcc1b24a5d2895613856b1fdb0d8de0a477fed2a2d5b3f8007d191ac26862384e7ef813aba192036100fbcdcae7aa45421491689ed7c2a19ccd92f39afb0beac915f17a24b90827fa38656c2e7df37dfbe4f43398ce385dc670bc143ca714922b96a8f468f315788169759c31590c641608765a93ffd7dcff96b13f31771974a0cabfe0", 0x1000, 0x0, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x47, 0x4, 0x6, 0x958f, 0xe, "04c198582b963f59"}) (async) 22:06:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_open_pts(r1, 0x410600) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) (async) syz_open_pts(r1, 0x410600) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:06:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)) sendmsg$key(r0, &(0x7f0000000000)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x17, 0x0, 0x8, 0x0, 0x0, 0x70bd26, 0x8}, 0x10}}, 0x4040015) socket$key(0xf, 0x3, 0x2) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)) (async) sendmsg$key(r0, &(0x7f0000000000)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x17, 0x0, 0x8, 0x0, 0x0, 0x70bd26, 0x8}, 0x10}}, 0x4040015) (async) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/142, 0x8e) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x17ab, 0x200, 0x1, 0x0, 0x17, "7596a65fd0dce9e4"}) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x9, 0x7, 0xfffc}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000080)=""/142, 0x8e) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x17ab, 0x200, 0x1, 0x0, 0x17, "7596a65fd0dce9e4"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000080)=""/142, 0x8e) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x17ab, 0x200, 0x1, 0x0, 0x17, "7596a65fd0dce9e4"}) (async) 22:06:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)) (async) sendmsg$key(r0, &(0x7f0000000000)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x17, 0x0, 0x8, 0x0, 0x0, 0x70bd26, 0x8}, 0x10}}, 0x4040015) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x9, 0x7, 0xfffc}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x9, 0x7, 0xfffc}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_open_pts(r1, 0x410600) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) (async) syz_open_pts(r1, 0x410600) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r1, &(0x7f0000000080)=""/142, 0x8e) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x17ab, 0x200, 0x1, 0x0, 0x17, "7596a65fd0dce9e4"}) 22:06:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x101080) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x24, 0x8001, 0x0, 0x0, 0x5, "3eb5f58f69c54f06"}) 22:06:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x9, 0x7, 0xfffc}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:06:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x101080) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x24, 0x8001, 0x0, 0x0, 0x5, "3eb5f58f69c54f06"}) 22:06:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x7, 0x4, 0x3, 0x530, 0x3}}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x28) 22:06:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x7) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="e051192d72d76ab6ab05048dd2d4c69bbe2378301235f0ee1a72d2c081089e2a61a6f221d8717cd581c4c2da7a6f3d6116b80639ea172e09ddcc8bedfb41dcb9398344aa9e6cc85d5b86f374a9e34a797bb79fd813638a6c6d44953717806dc9bb44209777964f219afb3f30442df2e74acefe21ce0626905af5d7fdd7f8218c27da325bdcd1960788c63271165c8703dde41a242f172709b865888ed17540b10450f8e97f9baf4f01271e179705f2c0b0121d13f72db501ad9b0cb0f9be31b79db9a9134606596221b895d279490d636be53bdfc6374a6f5f0d74a500638ee7570419ce3be856b75f07fa7a8e3490d08bb9e6a3d73c9eabe4") msgget$private(0x0, 0x28) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x5, 0x4, 0x40}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x640481, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) ioctl$TIOCEXCL(r1, 0x540c) r4 = syz_open_pts(0xffffffffffffffff, 0x2c8941) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000080)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000280)={0x18ed, 0xaec, 0x9}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r6, 0x480100) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) 22:06:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) (async, rerun: 64) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) (rerun: 64) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x7, 0x4, 0x3, 0x530, 0x3}}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x28) 22:06:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x101080) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x24, 0x8001, 0x0, 0x0, 0x5, "3eb5f58f69c54f06"}) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x7) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="e051192d72d76ab6ab05048dd2d4c69bbe2378301235f0ee1a72d2c081089e2a61a6f221d8717cd581c4c2da7a6f3d6116b80639ea172e09ddcc8bedfb41dcb9398344aa9e6cc85d5b86f374a9e34a797bb79fd813638a6c6d44953717806dc9bb44209777964f219afb3f30442df2e74acefe21ce0626905af5d7fdd7f8218c27da325bdcd1960788c63271165c8703dde41a242f172709b865888ed17540b10450f8e97f9baf4f01271e179705f2c0b0121d13f72db501ad9b0cb0f9be31b79db9a9134606596221b895d279490d636be53bdfc6374a6f5f0d74a500638ee7570419ce3be856b75f07fa7a8e3490d08bb9e6a3d73c9eabe4") msgget$private(0x0, 0x28) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x5, 0x4, 0x40}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x640481, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) ioctl$TIOCEXCL(r1, 0x540c) r4 = syz_open_pts(0xffffffffffffffff, 0x2c8941) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000080)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000280)={0x18ed, 0xaec, 0x9}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r6, 0x480100) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x7) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="e051192d72d76ab6ab05048dd2d4c69bbe2378301235f0ee1a72d2c081089e2a61a6f221d8717cd581c4c2da7a6f3d6116b80639ea172e09ddcc8bedfb41dcb9398344aa9e6cc85d5b86f374a9e34a797bb79fd813638a6c6d44953717806dc9bb44209777964f219afb3f30442df2e74acefe21ce0626905af5d7fdd7f8218c27da325bdcd1960788c63271165c8703dde41a242f172709b865888ed17540b10450f8e97f9baf4f01271e179705f2c0b0121d13f72db501ad9b0cb0f9be31b79db9a9134606596221b895d279490d636be53bdfc6374a6f5f0d74a500638ee7570419ce3be856b75f07fa7a8e3490d08bb9e6a3d73c9eabe4") (async) msgget$private(0x0, 0x28) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x5, 0x4, 0x40}) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x640481, 0x0) (async) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) syz_open_pts(0xffffffffffffffff, 0x2c8941) (async) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000080)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000280)={0x18ed, 0xaec, 0x9}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r6, 0x480100) (async) 22:06:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 22:06:55 executing program 4: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @bcast}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0211000002158d5d03e87dd47dd40000"], 0x17}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x410100, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x20, 0x19f, &(0x7f0000000240)="0cc51e0c0605f51cf80d482016164e560bbfa20c35071d5240689bca8abcd04019799acff67645a845445819193bdfe4dc0e0e5c80f8252d624a590b9df0dc456f5c3710b54c427345f3fc24a4bac36d87a329145ad8a83f6b66b5e479530d3809b81b28d291b7560899163a365d7a09ed0945f338bcfb3b4042045e87c2923aa5ef7e50dcf621e351b8c05222c1258274338cb102445f8bf8cf66e782157189e70d825faadd3ca4978916ab52e933a8c34276e7f83c11b59cc55b9ec43a45096c431ffb428cc875933964b56cebe048efaa593ae7fbb24c0ee0a05d05c226d8fdc3b3ee3162000446fd79a4e00744c5166c08ee3a2aa57ce3d4e5a9137a3624ef787ccbd72e68818c2f46bc3f7b4a2c9537a82ee3072fac2f74ba09f0df6bbe106ae0ebfd434a08a6fb5961343d5b98f3b63784c66dc043bd9e3a216636caf567bb641150984012b6e689b032e163f3d7b1fddfad0ee4872f7994a9fbb1e8c88c172cce1eb58d45e389b6609cd3586eac846a68dac4e0ec16fda0142cf950f643cabb4e31b3b22806787d71c69d9222af6049a040b4735631cc81b9a7d1fe1b808fa64ab99cedf5285dde32c109545f08b05ae3bfd98bf606e0161d7e1149bbabcd59b857faae1f74c43fde6031f6584326c181730918f8b923ab23f3ab6d8c4a978ae9cfc9dc8dfa76b80b03d9a77a1c0e4e6de77018f593afc3c9abf235d265daef3bb833c270415176a1f1b74902dcb4a2e8b74ae06a8966c57a1d7d25f921bff03ea4b64d9f3f658d01abbd07ad5458282688df949dc7eb41c2d2186b17d641f2201f9f25019320abb2838674fd5c8946711ee41ead9db9f2c6691ffa70b8f6bd04e4a32bdc94779aaabf4a08f4882f2462d53c08cdae7e54411c6c1372e7475360de206c26306f16ba4f0bde2d0552263b4757e0147260841b61a3e3027ee670ffec8228b94a2ef126736b3e85beaaa3002361dc585bde425886ce425d1823d92c74773093901c1a4c7af91a37c5f1c092755336ee627922c7a0f26b9c48c1769e7794ec69b17976cde5192ee1c0d7488d2e2e54d45d605e3a2174628f879e6ef94a2314af7faa5a15b2de9bf814dcc2e778cae95f359cf03bdc37c0b646fcafe5757fbf74a3ee1c3165fec514a37afad73957035c80e0c392c3d296047107475a8888e4db9b408f21c916de8283df2f2c4bc41b08d578c9be2db9aa6376d9551ea08665aadce4763141b34c90a76125a00b144f5a514f818b892a08195e681a22a62044afc907df887f780506281fcb1acd9f632ac46b917df0190145e86a6376d4886996fbfc10b6fcc596bab37cc51e0dd1095833ded7edd75c34cb9deb79c1b5b0a7c0e2123ede2cde3cefe1828bb4f15563479030314746cbef5e018040f145277b3d67e0eae96533151afc9262b652ebeb1e3633321d9fe335af"}) 22:06:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) (async, rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x7, 0x4, 0x3, 0x530, 0x3}}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x28) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:06:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) (async) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x7) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="e051192d72d76ab6ab05048dd2d4c69bbe2378301235f0ee1a72d2c081089e2a61a6f221d8717cd581c4c2da7a6f3d6116b80639ea172e09ddcc8bedfb41dcb9398344aa9e6cc85d5b86f374a9e34a797bb79fd813638a6c6d44953717806dc9bb44209777964f219afb3f30442df2e74acefe21ce0626905af5d7fdd7f8218c27da325bdcd1960788c63271165c8703dde41a242f172709b865888ed17540b10450f8e97f9baf4f01271e179705f2c0b0121d13f72db501ad9b0cb0f9be31b79db9a9134606596221b895d279490d636be53bdfc6374a6f5f0d74a500638ee7570419ce3be856b75f07fa7a8e3490d08bb9e6a3d73c9eabe4") msgget$private(0x0, 0x28) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x5, 0x4, 0x40}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x640481, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) ioctl$TIOCEXCL(r1, 0x540c) r4 = syz_open_pts(0xffffffffffffffff, 0x2c8941) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000080)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000280)={0x18ed, 0xaec, 0x9}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r6, 0x480100) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x7) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="e051192d72d76ab6ab05048dd2d4c69bbe2378301235f0ee1a72d2c081089e2a61a6f221d8717cd581c4c2da7a6f3d6116b80639ea172e09ddcc8bedfb41dcb9398344aa9e6cc85d5b86f374a9e34a797bb79fd813638a6c6d44953717806dc9bb44209777964f219afb3f30442df2e74acefe21ce0626905af5d7fdd7f8218c27da325bdcd1960788c63271165c8703dde41a242f172709b865888ed17540b10450f8e97f9baf4f01271e179705f2c0b0121d13f72db501ad9b0cb0f9be31b79db9a9134606596221b895d279490d636be53bdfc6374a6f5f0d74a500638ee7570419ce3be856b75f07fa7a8e3490d08bb9e6a3d73c9eabe4") (async) msgget$private(0x0, 0x28) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x5, 0x4, 0x40}) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x640481, 0x0) (async) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) syz_open_pts(0xffffffffffffffff, 0x2c8941) (async) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000080)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000280)={0x18ed, 0xaec, 0x9}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r6, 0x480100) (async) 22:06:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x20, 0x3, 0xffff, 0x2, 0x4}}) 22:06:55 executing program 4: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @bcast}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0211000002158d5d03e87dd47dd40000"], 0x17}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x410100, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x20, 0x19f, &(0x7f0000000240)="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"}) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @bcast}, 0x1c) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0211000002158d5d03e87dd47dd40000"], 0x17}}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x410100, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x20, 0x19f, &(0x7f0000000240)="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"}) (async) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) 22:06:55 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x26) 22:06:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x20, 0x3, 0xffff, 0x2, 0x4}}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x20, 0x3, 0xffff, 0x2, 0x4}}) (async) 22:06:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/6) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x1) 22:06:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async, rerun: 32) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) 22:06:55 executing program 4: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @bcast}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0211000002158d5d03e87dd47dd40000"], 0x17}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x410100, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x20, 0x19f, &(0x7f0000000240)="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"}) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @bcast}, 0x1c) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0211000002158d5d03e87dd47dd40000"], 0x17}}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x410100, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x20, 0x19f, &(0x7f0000000240)="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"}) (async) 22:06:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3f) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x20, 0x3, 0xffff, 0x2, 0x4}}) 22:06:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) (async, rerun: 32) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/6) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x1) 22:06:56 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x26) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x26) (async) 22:06:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3f) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3f) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x29) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async, rerun: 32) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) 22:06:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x11, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_key={0x1b, 0x0, 0x648, 0x0, "a116e5fed339ecc66c6b4cb313bf752ecaa07e788a5e093b14fee8445d721ae8600e355d5a4c1abb7676bc871718c20c6881f1ee11a25e94af67ac6e4f989fc95758b38fc0de502d4991d85c72878fa3023abd0c9a0ac9b2a1ea8fdb481b3febb9f3a0f74a701e140465175ecf2fdb815bf2350650edc27ad6f7354fb17180aac239ad9ed0ce899637e050bcfbc14e4efdbe7e553e36545b4b4051243635e36ad45d7b94b7a7ea805324f8f4b028bc8749263cee9debfb4c8d483594016d914f397ba4354c2759a689"}, @sadb_x_nat_t_type={0x1}]}, 0x118}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240001c0) 22:06:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/6) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/6) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x1) (async) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x29) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x29) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:06:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3f) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3f) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:56 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x26) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x26) (async) 22:06:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x11, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_key={0x1b, 0x0, 0x648, 0x0, "a116e5fed339ecc66c6b4cb313bf752ecaa07e788a5e093b14fee8445d721ae8600e355d5a4c1abb7676bc871718c20c6881f1ee11a25e94af67ac6e4f989fc95758b38fc0de502d4991d85c72878fa3023abd0c9a0ac9b2a1ea8fdb481b3febb9f3a0f74a701e140465175ecf2fdb815bf2350650edc27ad6f7354fb17180aac239ad9ed0ce899637e050bcfbc14e4efdbe7e553e36545b4b4051243635e36ad45d7b94b7a7ea805324f8f4b028bc8749263cee9debfb4c8d483594016d914f397ba4354c2759a689"}, @sadb_x_nat_t_type={0x1}]}, 0x118}}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240001c0) 22:06:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x9, 0x7f, 0x81, 0x1, 0x12, "06400351f19f529f"}) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x29) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x29) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:06:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000ac0)=""/146, 0x92) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x17, 0x7b, &(0x7f0000000100)="7e6aad54946a43b92183b46d7b3d5674a9905cad82273e0f40a10e4472aa3b664f8d990de4122855a71e1658fb95a7c9e22923a34617b67849f38d285f77258e5f9e70c784dc4e545ca18471f39e921e754b7eb745e59657a5fa22b92354862955a3c3e3d780e64ab4ebb352f974e69b2faa749361135ab28f4518c2b6fa969f6f3412fbab23fece7ddace5c108f5c71e29932eaa662ce944398c0990e857dc8a33d9632554dacd34ccc2d27dbc2cbd40e780b2ae365da325e24e1617cacf4f5221164731fa36ee27d9c349cdaaf581bf8c02b8c827a4d72201716d5ecafb56add67188905fefafe786faee52cd47124c7daf912babbade073b981a07ee8291e6b1ba643d6e877e50366a69942c0db32685d917089c9ce56e1cd931d0b4293cd3b6798d538a4a68a986307bc537d3df5729ceb1a43a11b754868f52790a02f9c6168a446f79f2524d64de6f33a5703b1393ce0b965ffbaab9833a5138d3c4d49f8462fc01a68b7b845a3276b833071b9b5b5fc79e19aa6f3de681807c960f148660a06a687c6f8286fe0f791da302ae5fcfde2e8fd6dc74cbda88fcac5fbe868fc008ac505afc97ec141834931f1b437085b09ac1016584d664a3714094435d482d3b096ea8b52f3e10184bba238ed7dd80b82a92096a072aa6fb33411a28aa27244faf22f79d3f8abf79804e5e6967f8823d1bcf8ecb1f0a7ccf61a48c16c217b2d59c983ddfb614437d8e537f1a4c3a92307a298967c5475a3f5471732a306652fcdc8797fd528302f9f8b114e78d28fa57918a3d3eaa6c43c04905a9aa478782677af7103726e3f415993f7c60df7c6245edd66d6648e866d2e4bfffc50821be6907424a9b8dc2e4ca12051e3b1f6da55f3b2e85978f75953e89a15bf97c1464fc2e18b09f04e11f5c0139c712ad37189ae4dbe3e3f421cfd085608ffbe89846cc466c44cc123ed411a836957195db47bb7d0aa9b076f79e3faa69eb81a09dbcc3fe12df7610c38199c3189efdf657ef76711a9443de238fac33ab638d75cb1ea062ecd1e651d4d78ccc3c36e146d3ca52fa055fe0e17906c90a78962ae39bc1e56260aa4bffebcd5f4d1dc13967b9a86573d2f5e0f5a85269955922ce7c7d40d9626450679faf0a940cff7704e9bc690bb4f42c7f2f53f46048b3ac6b9553aa72f7e169dd2621673213165ccbf6b527138316a1ee3e527c0e1d77b20e478126d6835c5debc67f52c07710bdb2eb8dfad56193df2ff9aaac169ac63e4b1ec5e722a2c578ee3115a610f3b1853b40a5e31690683a77f38b7071d51b4cb0e8b3c15d0a5ece362158f03f042ae0cb0f7c664262a667ff859569255a8c0b6a112a3e43bd23861534c13a04f7dd71071d0bfd846207bd4eb4075502066917a38456f849defd7a26dadc2308b9e6ae01dd45993d3049b946a23c6dc4391beacd710"}) r2 = syz_open_pts(r0, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x488000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f00000000c0)) 22:06:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0xff5) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 22:06:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x11, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_key={0x1b, 0x0, 0x648, 0x0, "a116e5fed339ecc66c6b4cb313bf752ecaa07e788a5e093b14fee8445d721ae8600e355d5a4c1abb7676bc871718c20c6881f1ee11a25e94af67ac6e4f989fc95758b38fc0de502d4991d85c72878fa3023abd0c9a0ac9b2a1ea8fdb481b3febb9f3a0f74a701e140465175ecf2fdb815bf2350650edc27ad6f7354fb17180aac239ad9ed0ce899637e050bcfbc14e4efdbe7e553e36545b4b4051243635e36ad45d7b94b7a7ea805324f8f4b028bc8749263cee9debfb4c8d483594016d914f397ba4354c2759a689"}, @sadb_x_nat_t_type={0x1}]}, 0x118}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240001c0) 22:06:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x9, 0x7f, 0x81, 0x1, 0x12, "06400351f19f529f"}) 22:06:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xb29b, 0x8, 0x0, 0xf}}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa6) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000080)=0xfffffe01) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) 22:06:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000ac0)=""/146, 0x92) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x17, 0x7b, &(0x7f0000000100)="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"}) r2 = syz_open_pts(r0, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x488000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) read$snapshot(0xffffffffffffffff, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x17, 0x7b, &(0x7f0000000100)="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"}) (async) syz_open_pts(r0, 0x4000) (async) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x4) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x488000, 0x0) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f00000000c0)) (async) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) 22:06:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 32) ioctl$FIONREAD(r0, 0x541b, 0x0) (rerun: 32) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xb29b, 0x8, 0x0, 0xf}}) (async) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa6) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000080)=0xfffffe01) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) 22:06:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0xff5) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0xff5) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) (async) 22:06:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x3, 0x3, 0x9, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x17, 0x32, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x80}}, @sadb_x_sec_ctx={0xe, 0x18, 0x3, 0x9, 0x61, "35893ce4facbb12acec8b3755e349c9fc68d40f17b83861d16525e34917f77fff6af13531da75388b4e8289333b49a49c1a7098a492305362150ed2cafbaa05fdad9aa5bb885ec5f4e4d67b3abb3f2616a246760cc9ae72e9b2c236bdbe7741f89"}, @sadb_lifetime={0x4, 0x3, 0x6, 0x3f, 0xd698, 0x100000000}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd25, 0x3507}, @sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0xf0}}, 0x20040880) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) read$snapshot(0xffffffffffffffff, &(0x7f0000000ac0)=""/146, 0x92) (rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1b, 0x17, 0x7b, &(0x7f0000000100)="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"}) r2 = syz_open_pts(r0, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x4) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x488000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f00000000c0)) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) 22:06:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async, rerun: 64) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x9, 0x7f, 0x81, 0x1, 0x12, "06400351f19f529f"}) 22:06:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xb29b, 0x8, 0x0, 0xf}}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa6) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000080)=0xfffffe01) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xb29b, 0x8, 0x0, 0xf}}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa6) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)) (async) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000080)=0xfffffe01) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) (async) 22:06:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x3, 0x3, 0x9, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x17, 0x32, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x80}}, @sadb_x_sec_ctx={0xe, 0x18, 0x3, 0x9, 0x61, "35893ce4facbb12acec8b3755e349c9fc68d40f17b83861d16525e34917f77fff6af13531da75388b4e8289333b49a49c1a7098a492305362150ed2cafbaa05fdad9aa5bb885ec5f4e4d67b3abb3f2616a246760cc9ae72e9b2c236bdbe7741f89"}, @sadb_lifetime={0x4, 0x3, 0x6, 0x3f, 0xd698, 0x100000000}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd25, 0x3507}, @sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0xf0}}, 0x20040880) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0xff5) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) 22:06:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0xfff9, 0x1, 0x4, 0xf}}) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x18) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) 22:06:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x511dc0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x200, 0x6, 0x7, 0x400, 0xd, "2e0c8d6af3d2ed3a"}) 22:06:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:06:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x3, 0x3, 0x9, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x17, 0x32, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x80}}, @sadb_x_sec_ctx={0xe, 0x18, 0x3, 0x9, 0x61, "35893ce4facbb12acec8b3755e349c9fc68d40f17b83861d16525e34917f77fff6af13531da75388b4e8289333b49a49c1a7098a492305362150ed2cafbaa05fdad9aa5bb885ec5f4e4d67b3abb3f2616a246760cc9ae72e9b2c236bdbe7741f89"}, @sadb_lifetime={0x4, 0x3, 0x6, 0x3f, 0xd698, 0x100000000}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd25, 0x3507}, @sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}]}, 0xf0}}, 0x20040880) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x3, 0xf1, 0xcc4e}) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 22:06:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0xfff9, 0x1, 0x4, 0xf}}) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x18) (async) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) 22:06:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x511dc0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x200, 0x6, 0x7, 0x400, 0xd, "2e0c8d6af3d2ed3a"}) 22:06:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb6fa}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 22:06:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 22:06:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x3, 0xf1, 0xcc4e}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x3, 0xf1, 0xcc4e}) (async) 22:06:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0xfff9, 0x1, 0x4, 0xf}}) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x18) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0xfff9, 0x1, 0x4, 0xf}}) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x18) (async) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) (async) 22:06:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb6fa}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 22:06:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x511dc0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x200, 0x6, 0x7, 0x400, 0xd, "2e0c8d6af3d2ed3a"}) 22:06:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) (async) 22:06:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x3, 0xf1, 0xcc4e}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x3, 0xf1, 0xcc4e}) (async) 22:06:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) 22:06:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb6fa}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 22:06:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/216) 22:06:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2f) 22:06:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSBRK(r0, 0x5409, 0x8001) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000001c0)) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) 22:06:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) 22:06:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/216) 22:06:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x5, 0x2, 0x0, 0xfffffffc}, 0x10}}, 0x0) 22:06:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2f) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x2f) (async) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSBRK(r0, 0x5409, 0x8001) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000001c0)) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) 22:06:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) (async) 22:06:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/216) 22:06:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x5, 0x2, 0x0, 0xfffffffc}, 0x10}}, 0x0) 22:06:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSBRK(r0, 0x5409, 0x8001) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000001c0)) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TCSBRK(r0, 0x5409, 0x8001) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000001c0)) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) (async) 22:06:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async, rerun: 64) ioctl$TIOCSIG(r0, 0x40045436, 0x2f) (rerun: 64) 22:06:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDSKBLED(r1, 0x4b65, 0x7f) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="9c1b76b2ccafba58733b75b714e9f11c576a4dc199eb1badf3580a7f3374899f89f27e83743106ddc2adf8f2fafe81e17e98810010c8ff52a48fa32f1cd1d403c9660114f6095ac2012ef5c187d982da207d7730b3bd6eb8afba1e7fa9857e2db65a3d3d1e23b8e5a57b5117ced4bda4d6412856f755c8b5edb49a9504333e2152912bc54e286ef4b52e8aee8d6ff6dc5a046475814264805801ec979eabea0119fba1953d20dfdc5920fb4eff3c4bbbae4bfccf9ddf5ae5c60c51fceb12b319945f511ad32bd3235b346c5591f5c7458ef5beb636a0176e87f57dae") 22:06:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) getpid() ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) 22:06:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x5, 0x2, 0x0, 0xfffffffc}, 0x10}}, 0x0) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 22:06:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x7f) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="9c1b76b2ccafba58733b75b714e9f11c576a4dc199eb1badf3580a7f3374899f89f27e83743106ddc2adf8f2fafe81e17e98810010c8ff52a48fa32f1cd1d403c9660114f6095ac2012ef5c187d982da207d7730b3bd6eb8afba1e7fa9857e2db65a3d3d1e23b8e5a57b5117ced4bda4d6412856f755c8b5edb49a9504333e2152912bc54e286ef4b52e8aee8d6ff6dc5a046475814264805801ec979eabea0119fba1953d20dfdc5920fb4eff3c4bbbae4bfccf9ddf5ae5c60c51fceb12b319945f511ad32bd3235b346c5591f5c7458ef5beb636a0176e87f57dae") 22:06:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) getpid() (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) (async, rerun: 32) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) (rerun: 32) 22:06:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)={@dev, @remote, @val={@void, {0x8864}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d03496", 0x0, "0cf804"}}}}}}, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x1e, 0x1b3, &(0x7f00000000c0)="1e486c7f1cd77345f4cf39c21aa0f40af59e658988990e3312b52e4695e8f54cc846f79d1003eee6ce054d182e0b689db08cb9d8a5572e055febf4e4c7f868932f1daaa404ace4a99dd853a4f3ad9c816aaf9a2a3717eeff965eea60255cfa220569f5b9208a46ea6b4e221de011b00ff4483cccfdd6c3640af8f1906078670980e9f03ff5641a0ae3bbdcf3c7451c1bbf0c8d54906717948199295d83ba7789823146f12af6d73e44de68e8f3b72b2a470c0c9957daaa94d4a7ea6f746a593118be067b6853eccc94110190bd258b4f0f8e15c4701112f13f14f399ac62b750d6d347d8ba9c02f3a28916764c98063ed716759113195c9cffbaeec02cfaccce01098003f68316302825a30725c47c69b183c60d6c3001e86af52c5ffff763f79b4ecd14bde84af23aa24e6d34dc86948dc271586ea36fe7587d1ca0f1b94df3e9dc4f9401496653630770fd0de7947a2cad3bcbf10086c5e980efcab43ca66eecf7463d780c86b056014326b6d027ec005a7eae5889256cbfdade57d92a70a13400e2643815db8b17e7beaa5b7e0449db006fa3f0e66ba214b1725a76fef1b1867b3e2598479e881dacff94548070627c741a7638ec03d808f98e267970022f6fe180c85480b0abf33280271b67e95b3c7f7903899112973a50e013d8609996f6e59f2a261b6a18f40c4950d7ba46f3178fabca9c8dcd496f70c2b888834aac0a681ec02d0e43a1269bd0941eb9f4ea7e53bd5579b24ea77f8ceab6b4e42ed330a67ddc28f2144f675b2379244c17c3ba23276a0829c0e97a06c4c5e2de39ccdf772e6e08d1a4e29845244279bb3fd0b91c19b5541f36bece3d6d56557838b3c2992c58a264467a942242096ba9479c0d5281cfd7863f98658547d80eac1cf032f8f88eb1466ff3720df20c6341c8202dedd887bc671b3a770ccb86a3c411336685a5744fd490097b68556607127f5b6120a5763c874734e7070c25f14fa376cb722e3a007fd76f262b176f372980f777acae7d9f18e4baa4e4c2e0a083706a452cbe6e68a49bf6521643a859f47c58a3843a30923dafecb11e6acd0b4f43c8245d80d6c174cb1128d758b570b3ad91b91702759bd7a21848100a44ff77eb0da884cf26a9657ee3b9811ca8dc40333e61466aeded3ae453645bf5cfdcdb9dee9702fce2060b1d6372917d105ee91c10e354094287656da49d8605503d458941da3a1f10396a505fe37245921ad2e1ea3688a69988a44db170c1824201cfa0e2eada663eb822797a3bb4f27bb59540a9b3a4516632212ec7708eade4c5b135b1fc7c82d9d122bb7e42e709d96d383e3ee1a1519675d599798a6a320aa3ae806b53a85e1e82c3379e352a2dc3f5183ca4d1492086c426ec97490483f099a8cab4f75910e7937aa3fba2638f1e5fa4cc4c6ab5d0ae54d447b0a7c570b9a64aa502"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 22:06:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) getpid() (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) 22:06:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDSKBLED(r1, 0x4b65, 0x7f) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="9c1b76b2ccafba58733b75b714e9f11c576a4dc199eb1badf3580a7f3374899f89f27e83743106ddc2adf8f2fafe81e17e98810010c8ff52a48fa32f1cd1d403c9660114f6095ac2012ef5c187d982da207d7730b3bd6eb8afba1e7fa9857e2db65a3d3d1e23b8e5a57b5117ced4bda4d6412856f755c8b5edb49a9504333e2152912bc54e286ef4b52e8aee8d6ff6dc5a046475814264805801ec979eabea0119fba1953d20dfdc5920fb4eff3c4bbbae4bfccf9ddf5ae5c60c51fceb12b319945f511ad32bd3235b346c5591f5c7458ef5beb636a0176e87f57dae") (rerun: 64) 22:06:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)={@dev, @remote, @val={@void, {0x8864}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d03496", 0x0, "0cf804"}}}}}}, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x1e, 0x1b3, &(0x7f00000000c0)="1e486c7f1cd77345f4cf39c21aa0f40af59e658988990e3312b52e4695e8f54cc846f79d1003eee6ce054d182e0b689db08cb9d8a5572e055febf4e4c7f868932f1daaa404ace4a99dd853a4f3ad9c816aaf9a2a3717eeff965eea60255cfa220569f5b9208a46ea6b4e221de011b00ff4483cccfdd6c3640af8f1906078670980e9f03ff5641a0ae3bbdcf3c7451c1bbf0c8d54906717948199295d83ba7789823146f12af6d73e44de68e8f3b72b2a470c0c9957daaa94d4a7ea6f746a593118be067b6853eccc94110190bd258b4f0f8e15c4701112f13f14f399ac62b750d6d347d8ba9c02f3a28916764c98063ed716759113195c9cffbaeec02cfaccce01098003f68316302825a30725c47c69b183c60d6c3001e86af52c5ffff763f79b4ecd14bde84af23aa24e6d34dc86948dc271586ea36fe7587d1ca0f1b94df3e9dc4f9401496653630770fd0de7947a2cad3bcbf10086c5e980efcab43ca66eecf7463d780c86b056014326b6d027ec005a7eae5889256cbfdade57d92a70a13400e2643815db8b17e7beaa5b7e0449db006fa3f0e66ba214b1725a76fef1b1867b3e2598479e881dacff94548070627c741a7638ec03d808f98e267970022f6fe180c85480b0abf33280271b67e95b3c7f7903899112973a50e013d8609996f6e59f2a261b6a18f40c4950d7ba46f3178fabca9c8dcd496f70c2b888834aac0a681ec02d0e43a1269bd0941eb9f4ea7e53bd5579b24ea77f8ceab6b4e42ed330a67ddc28f2144f675b2379244c17c3ba23276a0829c0e97a06c4c5e2de39ccdf772e6e08d1a4e29845244279bb3fd0b91c19b5541f36bece3d6d56557838b3c2992c58a264467a942242096ba9479c0d5281cfd7863f98658547d80eac1cf032f8f88eb1466ff3720df20c6341c8202dedd887bc671b3a770ccb86a3c411336685a5744fd490097b68556607127f5b6120a5763c874734e7070c25f14fa376cb722e3a007fd76f262b176f372980f777acae7d9f18e4baa4e4c2e0a083706a452cbe6e68a49bf6521643a859f47c58a3843a30923dafecb11e6acd0b4f43c8245d80d6c174cb1128d758b570b3ad91b91702759bd7a21848100a44ff77eb0da884cf26a9657ee3b9811ca8dc40333e61466aeded3ae453645bf5cfdcdb9dee9702fce2060b1d6372917d105ee91c10e354094287656da49d8605503d458941da3a1f10396a505fe37245921ad2e1ea3688a69988a44db170c1824201cfa0e2eada663eb822797a3bb4f27bb59540a9b3a4516632212ec7708eade4c5b135b1fc7c82d9d122bb7e42e709d96d383e3ee1a1519675d599798a6a320aa3ae806b53a85e1e82c3379e352a2dc3f5183ca4d1492086c426ec97490483f099a8cab4f75910e7937aa3fba2638f1e5fa4cc4c6ab5d0ae54d447b0a7c570b9a64aa502"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 22:06:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:06:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:06:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xe3472b41ac071513, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) 22:06:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)={@dev, @remote, @val={@void, {0x8864}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d03496", 0x0, "0cf804"}}}}}}, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x1e, 0x1b3, &(0x7f00000000c0)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@dev, @remote, @val={@void, {0x8864}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d03496", 0x0, "0cf804"}}}}}}, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x1e, 0x1b3, &(0x7f00000000c0)="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"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:06:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x60400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0x10, 0x1e, 0x9e, &(0x7f00000004c0)}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000900)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x15, 0x1b6, &(0x7f0000000040)}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x7) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="e051192d72d76ab6ab05048dd2d4c69bbe2378301235f0ee1a72d2c081089e2a61a6f221d8717cd581c4c2da7a6f3d6116b80639ea172e09ddcc8bedfb41dcb9398344aa9e6cc85d5b86f374a9e34a797bb79fd813638a6c6d44953717806dc9bb44209777964f219afb3f30442df2e74acefe21ce0626905af5d7fdd7f8218c27da325bdcd1960788c63271165c8703dde41a242f172709b865888ed17540b10450f8e97f9baf4f01271e179705f2c0b0121d13f72db501ad9b0cb0f9be31b79db9a9134606596221b895d279490d636be53bdfc6374a6f5f0d74a500638ee7570419ce3be856b75f07fa7a8e3490d08bb9e6a3d73c9eabe4") msgget$private(0x0, 0x28) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x5, 0x4, 0x40}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x640481, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) ioctl$TIOCEXCL(r1, 0x540c) r4 = syz_open_pts(0xffffffffffffffff, 0x2c8941) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000080)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000280)={0x18ed, 0xaec, 0x9}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r6, 0x480100) 22:06:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000801}, 0x4001) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02110000020000000000000002b6f73f6bf74200000000"], 0x17}}, 0x0) 22:06:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 22:06:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xe3472b41ac071513, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xe3472b41ac071513, 0x0) (async) ioctl$TCSBRK(r0, 0x5409, 0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) (async) 22:06:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x40, 0xce, 0x0, 0x1c, @empty, @local, 0x8, 0xd1, 0xfffffffb, 0x8000}}) 22:06:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xe3472b41ac071513, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xe3472b41ac071513, 0x0) (async) ioctl$TCSBRK(r0, 0x5409, 0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) (async) 22:06:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x40, 0xce, 0x0, 0x1c, @empty, @local, 0x8, 0xd1, 0xfffffffb, 0x8000}}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x40, 0xce, 0x0, 0x1c, @empty, @local, 0x8, 0xd1, 0xfffffffb, 0x8000}}) (async) 22:06:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x60400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0x10, 0x1e, 0x9e, &(0x7f00000004c0)}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000900)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x15, 0x1b6, &(0x7f0000000040)}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:06:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000801}, 0x4001) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02110000020000000000000002b6f73f6bf74200000000"], 0x17}}, 0x0) 22:06:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) (async) 22:06:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_open_pts(r1, 0x410600) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x9, 0x1, 0x1}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080225bd7080fcdbbe255c0079d397469900f8ffffef6f000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x7ff, 0x7, 0x9}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/127) ioctl$TIOCSIG(r0, 0x40045436, 0x3d) 22:06:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x60400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0x10, 0x1e, 0x9e, &(0x7f00000004c0)}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000900)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x15, 0x1b6, &(0x7f0000000040)}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x60400, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0x10, 0x1e, 0x9e, &(0x7f00000004c0)}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000900)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x15, 0x1b6, &(0x7f0000000040)}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:06:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x40, 0xce, 0x0, 0x1c, @empty, @local, 0x8, 0xd1, 0xfffffffb, 0x8000}}) 22:06:58 executing program 0: ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f00000000c0)=0x7ffdffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)=0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x101, 0x7, 0x0, 0x8000, 0x1b, "2de7ec1e927870ef"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) r3 = accept4$rose(r2, &(0x7f0000000180)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f00000001c0)=0x1c, 0x0) sendto$rose(r3, &(0x7f0000000b80)="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", 0x1000, 0x0, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x47, 0x4, 0x6, 0x958f, 0xe, "04c198582b963f59"}) 22:06:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) (async) 22:06:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000801}, 0x4001) (async, rerun: 32) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r2, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02110000020000000000000002b6f73f6bf74200000000"], 0x17}}, 0x0) 22:06:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x9, 0x1, 0x1}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) (async) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080225bd7080fcdbbe255c0079d397469900f8ffffef6f000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x7ff, 0x7, 0x9}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/127) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x3d) 22:06:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0xff, 0x2, 0x0, 0xa, "7239395e84bb6759"}) 22:06:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4282c3, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) 22:06:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="021100030200000000000000008cc6d4428a6380ff5a1b77f500000067df"], 0x10}}, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r1) 22:06:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x9, 0x1, 0x1}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080225bd7080fcdbbe255c0079d397469900f8ffffef6f000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x7ff, 0x7, 0x9}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/127) ioctl$TIOCSIG(r0, 0x40045436, 0x3d) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x9, 0x1, 0x1}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) (async) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080225bd7080fcdbbe255c0079d397469900f8ffffef6f000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x7ff, 0x7, 0x9}) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/127) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x3d) (async) 22:06:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0xff, 0x2, 0x0, 0xa, "7239395e84bb6759"}) 22:06:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4282c3, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) 22:06:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="021100030200000000000000008cc6d4428a6380ff5a1b77f500000067df"], 0x10}}, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r1) socket$key(0xf, 0x3, 0x2) (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="021100030200000000000000008cc6d4428a6380ff5a1b77f500000067df"], 0x10}}, 0x0) (async) getpid() (async) sched_rr_get_interval(r1, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r1) (async) 22:06:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x6, 0xff, 0x2, 0x0, 0xa, "7239395e84bb6759"}) 22:06:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4282c3, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) 22:06:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000040)) 22:06:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x4) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="021100030200000000000000008cc6d4428a6380ff5a1b77f500000067df"], 0x10}}, 0x0) (async) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r1) 22:06:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:06:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) 22:06:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) (async, rerun: 64) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000040)) (rerun: 64) 22:06:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 22:06:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x800}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @local}}, 0x20) 22:06:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:06:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) 22:06:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000040)) 22:06:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:06:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x800}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @local}}, 0x20) 22:06:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) 22:06:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3f, 0x4, 0x7fff, 0xadad, 0xe, "810adbfbcae24169"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x179082, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) 22:06:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:06:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x40) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x408080, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) 22:06:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x800}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @local}}, 0x20) (rerun: 64) 22:06:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3f, 0x4, 0x7fff, 0xadad, 0xe, "810adbfbcae24169"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x179082, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$KDENABIO(r2, 0x4b36) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3f, 0x4, 0x7fff, 0xadad, 0xe, "810adbfbcae24169"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x179082, 0x0) (async) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) (async) ioctl$KDENABIO(r2, 0x4b36) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) (async) 22:06:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x40) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x408080, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) 22:06:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:06:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@private, @remote}, &(0x7f0000000140)=0xc) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021100000200000000000000000000006cd59963e0d2761559137bedd9c1989d134758aa2209f2044c97f082edbea67f0e17acec4d7e10cdcdff11b2a4f9e5ad357e9baaab4c294e86295e63934d6b88279515677e735f5075fbed055fba7d7b4216c5d1fab8582081f6600e86425b4692d292f6fa36aa191abe547fc7ea5992e41cb0db417a1f000000fc01b4da61d157485c6243f0834af1019adc2f39749bdd54bf7b1b453468e4"], 0x17}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bind$rose(r3, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}, 0x40) 22:06:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3f, 0x4, 0x7fff, 0xadad, 0xe, "810adbfbcae24169"}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x179082, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) (async) ioctl$KDENABIO(r2, 0x4b36) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) 22:06:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:06:59 executing program 3: socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000180)) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008001) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400102, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x40) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x408080, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) 22:06:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:06:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@private, @remote}, &(0x7f0000000140)=0xc) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021100000200000000000000000000006cd59963e0d2761559137bedd9c1989d134758aa2209f2044c97f082edbea67f0e17acec4d7e10cdcdff11b2a4f9e5ad357e9baaab4c294e86295e63934d6b88279515677e735f5075fbed055fba7d7b4216c5d1fab8582081f6600e86425b4692d292f6fa36aa191abe547fc7ea5992e41cb0db417a1f000000fc01b4da61d157485c6243f0834af1019adc2f39749bdd54bf7b1b453468e4"], 0x17}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bind$rose(r3, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}, 0x40) 22:06:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:06:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:06:59 executing program 3: socket$pppoe(0x18, 0x1, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000180)) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008001) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400102, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:06:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@private, @remote}, &(0x7f0000000140)=0xc) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="021100000200000000000000000000006cd59963e0d2761559137bedd9c1989d134758aa2209f2044c97f082edbea67f0e17acec4d7e10cdcdff11b2a4f9e5ad357e9baaab4c294e86295e63934d6b88279515677e735f5075fbed055fba7d7b4216c5d1fab8582081f6600e86425b4692d292f6fa36aa191abe547fc7ea5992e41cb0db417a1f000000fc01b4da61d157485c6243f0834af1019adc2f39749bdd54bf7b1b453468e4"], 0x17}}, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bind$rose(r3, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}, 0x40) 22:06:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:00 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) 22:07:00 executing program 3: socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000180)) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008001) (rerun: 64) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400102, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:00 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:07:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) 22:07:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:00 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000180)) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008001) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400102, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:00 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:00 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:07:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 22:07:00 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:00 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:00 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)=0xbda6) 22:07:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 22:07:00 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:00 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)=0xbda6) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)=0xbda6) (async) 22:07:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_pts(r0, 0x218002) (async) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) (async) ioctl$FIONREAD(r3, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) 22:07:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x2}]}, 0x18}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSIG(r0, 0x40045436, 0x38) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:01 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)=0xbda6) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)=0xbda6) (async) 22:07:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r1}}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @local, 0x7fff}, {0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0xffffffffffffffff, 0xc42}}, 0x48) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x80045438, &(0x7f0000000000)) 22:07:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSIG(r0, 0x40045436, 0x38) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x2}]}, 0x18}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r1}}, 0x18) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @local, 0x7fff}, {0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0xffffffffffffffff, 0xc42}}, 0x48) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x80045438, &(0x7f0000000000)) 22:07:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x2}]}, 0x18}}, 0x0) (async, rerun: 64) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (rerun: 64) 22:07:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSIG(r0, 0x40045436, 0x38) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x38) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r1}}, 0x18) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @local, 0x7fff}, {0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0xffffffffffffffff, 0xc42}}, 0x48) (async, rerun: 32) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x80045438, &(0x7f0000000000)) 22:07:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:01 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$KDSKBLED(r1, 0x4b65, 0x100) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:01 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44882}, 0x20000048) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r2, 0x541b, 0x0) 22:07:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 22:07:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$KDSKBLED(r1, 0x4b65, 0x100) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x100) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:07:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x80, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:02 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44882}, 0x20000048) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 32) ioctl$FIONREAD(r2, 0x541b, 0x0) (rerun: 32) 22:07:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, 0x0) 22:07:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 22:07:02 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44882}, 0x20000048) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r2, 0x541b, 0x0) 22:07:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$KDSKBLED(r1, 0x4b65, 0x100) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 22:07:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, 0x0) 22:07:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, 0x0) 22:07:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x7fff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="de58f94f65e4b80c0005ffffffffffe500000008000100030000000101060001000000010000000800010003000000"], 0x44}}, 0x801) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) 22:07:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) 22:07:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x7fff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="de58f94f65e4b80c0005ffffffffffe500000008000100030000000101060001000000010000000800010003000000"], 0x44}}, 0x801) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) 22:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:07:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) 22:07:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:07:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000080)) 22:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20, 0x2, "58375d14ef7f4460"}) 22:07:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDENABIO(r0, 0x4b36) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x7fff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="de58f94f65e4b80c0005ffffffffffe500000008000100030000000101060001000000010000000800010003000000"], 0x44}}, 0x801) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x7fff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="de58f94f65e4b80c0005ffffffffffe500000008000100030000000101060001000000010000000800010003000000"], 0x44}}, 0x801) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) 22:07:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 22:07:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x3) 22:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, "58375d14ef7f4460"}) 22:07:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDENABIO(r0, 0x4b36) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}]}, 0x20}}, 0x0) 22:07:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}]}, 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}]}, 0x20}}, 0x0) (async) 22:07:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDENABIO(r0, 0x4b36) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "58375d14ef7f4460"}) 22:07:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x3) (async) 22:07:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x11, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}]}, 0x20}}, 0x0) 22:07:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x3) (async) 22:07:04 executing program 3: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x31, 0x3, 0x0, 0x2, 0x0, 0x400}, 0x10}}, 0x0) 22:07:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x31, 0x3, 0x0, 0x2, 0x0, 0x400}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x31, 0x3, 0x0, 0x2, 0x0, 0x400}, 0x10}}, 0x0) (async) 22:07:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0xff, 0x1f}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) 22:07:04 executing program 3: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x31, 0x3, 0x0, 0x2, 0x0, 0x400}, 0x10}}, 0x0) 22:07:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0xff, 0x1f}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0xff, 0x1f}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) (async) 22:07:04 executing program 3: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:05 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x17}}, 0x20000000) socketpair(0x0, 0x800, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x6, 0x5, 0x9, @multicast, 'veth1_to_bond\x00'}) 22:07:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0xff, 0x1f}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) 22:07:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x22) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x401, 0x7f, 0x0, 0x6, 0xd, "fe610c0a6583e765"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x820000) 22:07:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x17, 0x15, 0x4a, &(0x7f0000000080)}) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) 22:07:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x22) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x401, 0x7f, 0x0, 0x6, 0xd, "fe610c0a6583e765"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x820000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x22) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x401, 0x7f, 0x0, 0x6, 0xd, "fe610c0a6583e765"}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x820000) (async) 22:07:05 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x17}}, 0x20000000) socketpair(0x0, 0x800, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x6, 0x5, 0x9, @multicast, 'veth1_to_bond\x00'}) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x17}}, 0x20000000) (async) socketpair(0x0, 0x800, 0xcb, &(0x7f00000000c0)) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x6, 0x5, 0x9, @multicast, 'veth1_to_bond\x00'}) (async) 22:07:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x17, 0x15, 0x4a, &(0x7f0000000080)}) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) (async) 22:07:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x22) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x401, 0x7f, 0x0, 0x6, 0xd, "fe610c0a6583e765"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x820000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x22) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x401, 0x7f, 0x0, 0x6, 0xd, "fe610c0a6583e765"}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x820000) (async) 22:07:05 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021100000219370000000000000800006890058d66a0bd5c68d1f820204a262310980c492b2ee68e438d5db56a06fb8f607d360bf6aebfc66b6f908048d70cf1c2ce9fa1221a262a357d6481c852540f97b9b0e826e6970384e1f0af92172f5414b56c7ffb2d0b206fba4f6091e3a1593da750d2402550c0151fa5db5f3effe30af7844cbafa3b74394bdb7acd2787fb5573f830209d85ecec591b85390e375740ca200cccba42565a02383e4198b43e5d0baee9d9632857b741c0b1e0667acde8db0a5cf69f491c825793c92fd83a437f713497617f6bfd0af18a6d21d425ca76103d3ce842c72cb263f34bf80c8fa64d9e3b5f1b3567c68e8b75f2f0d8150f018903dfff49d891fc3f3483545bc18cb028f8790ff61a19cef887f08c0e2a3e4977e32ad2ffb1693f060adb0683746d2b39fb743c7efb35211e9f356552ae6e54d8296e"], 0x17}}, 0x20000000) (async) socketpair(0x0, 0x800, 0xcb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000100)={0x6, 0x5, 0x9, @multicast, 'veth1_to_bond\x00'}) 22:07:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_pts(r0, 0x218002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x17, 0x15, 0x4a, &(0x7f0000000080)}) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x17, 0x15, 0x4a, &(0x7f0000000080)}) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) 22:07:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:06 executing program 3: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @multicast}]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCEXCL(r0, 0x540c) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x18, 0x1d, 0x10e, &(0x7f0000000080)}) syz_open_dev$tty1(0xc, 0x4, 0x2) 22:07:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="258b612d72fb52e6c0de03904d034c5ec4ca12a4fcdd932e18535db50c4b9e2c0c3c9eaf20627fcd59781f7869152a79efe0cc239a7ed96c87cf529d0b6a3991c6aaead3f159e54852158e3d0ae232af43d76867238bcba937ed6df5592da9164f4ba5bee86b1406e2489eea0b8327743fecbb5155af33ee6d8a3c7306f4dc1f6a99e0a7931dbffd00e9092f357946925e590aaa50bfd1ac5785adb96fa9f2ed11e3a525a267a16b9475e9f1f114244e838cb83bf7d8ef40017c9505330aea3f6b1c5a4377cb3ec4206663d259f2e9664f5346fd5df5575b40b3ad4f48ec26508c3a7558f7e20174a5d8abf3f9c56ee401ba3320fa294833a0") ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:06 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x6, 0x3ff, 0x4, 0x1, 0xa, "6e486eb0c4ffc831"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x9) syz_open_pts(r1, 0xc08100) 22:07:06 executing program 3: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @multicast}]}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$TIOCEXCL(r0, 0x540c) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x18, 0x1d, 0x10e, &(0x7f0000000080)}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) 22:07:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="258b612d72fb52e6c0de03904d034c5ec4ca12a4fcdd932e18535db50c4b9e2c0c3c9eaf20627fcd59781f7869152a79efe0cc239a7ed96c87cf529d0b6a3991c6aaead3f159e54852158e3d0ae232af43d76867238bcba937ed6df5592da9164f4ba5bee86b1406e2489eea0b8327743fecbb5155af33ee6d8a3c7306f4dc1f6a99e0a7931dbffd00e9092f357946925e590aaa50bfd1ac5785adb96fa9f2ed11e3a525a267a16b9475e9f1f114244e838cb83bf7d8ef40017c9505330aea3f6b1c5a4377cb3ec4206663d259f2e9664f5346fd5df5575b40b3ad4f48ec26508c3a7558f7e20174a5d8abf3f9c56ee401ba3320fa294833a0") ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="258b612d72fb52e6c0de03904d034c5ec4ca12a4fcdd932e18535db50c4b9e2c0c3c9eaf20627fcd59781f7869152a79efe0cc239a7ed96c87cf529d0b6a3991c6aaead3f159e54852158e3d0ae232af43d76867238bcba937ed6df5592da9164f4ba5bee86b1406e2489eea0b8327743fecbb5155af33ee6d8a3c7306f4dc1f6a99e0a7931dbffd00e9092f357946925e590aaa50bfd1ac5785adb96fa9f2ed11e3a525a267a16b9475e9f1f114244e838cb83bf7d8ef40017c9505330aea3f6b1c5a4377cb3ec4206663d259f2e9664f5346fd5df5575b40b3ad4f48ec26508c3a7558f7e20174a5d8abf3f9c56ee401ba3320fa294833a0") (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_pts(r0, 0x218002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:06 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x6, 0x3ff, 0x4, 0x1, 0xa, "6e486eb0c4ffc831"}) (async, rerun: 32) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$TCSBRK(r3, 0x5409, 0x9) (async, rerun: 64) syz_open_pts(r1, 0xc08100) (rerun: 64) 22:07:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:06 executing program 3: ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @multicast}]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCEXCL(r0, 0x540c) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x18, 0x1d, 0x10e, &(0x7f0000000080)}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @multicast}]}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$TIOCEXCL(r0, 0x540c) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x18, 0x1d, 0x10e, &(0x7f0000000080)}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) 22:07:06 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="258b612d72fb52e6c0de03904d034c5ec4ca12a4fcdd932e18535db50c4b9e2c0c3c9eaf20627fcd59781f7869152a79efe0cc239a7ed96c87cf529d0b6a3991c6aaead3f159e54852158e3d0ae232af43d76867238bcba937ed6df5592da9164f4ba5bee86b1406e2489eea0b8327743fecbb5155af33ee6d8a3c7306f4dc1f6a99e0a7931dbffd00e9092f357946925e590aaa50bfd1ac5785adb96fa9f2ed11e3a525a267a16b9475e9f1f114244e838cb83bf7d8ef40017c9505330aea3f6b1c5a4377cb3ec4206663d259f2e9664f5346fd5df5575b40b3ad4f48ec26508c3a7558f7e20174a5d8abf3f9c56ee401ba3320fa294833a0") (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:06 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x6, 0x3ff, 0x4, 0x1, 0xa, "6e486eb0c4ffc831"}) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x9) (async) syz_open_pts(r1, 0xc08100) 22:07:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x5e040) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x17}}, 0x0) 22:07:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x4080, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x14, 0x11, 0x163, &(0x7f0000000080)}) 22:07:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x100000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/156, 0x9c) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x7) ioctl$TIOCSIG(r1, 0x40045436, 0x2f) 22:07:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 64) ioctl$FIONREAD(r0, 0x541b, 0x0) (rerun: 64) 22:07:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x5e040) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x17}}, 0x0) 22:07:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x100000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/156, 0x9c) (async) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x2f) 22:07:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x4080, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x14, 0x11, 0x163, &(0x7f0000000080)}) 22:07:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x5e040) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x17}}, 0x0) 22:07:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) (rerun: 32) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x4080, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x14, 0x11, 0x163, &(0x7f0000000080)}) 22:07:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x100000) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f00000000c0)=""/156, 0x9c) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x7) ioctl$TIOCSIG(r1, 0x40045436, 0x2f) 22:07:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/48) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:07 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x40) 22:07:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240c0000}, 0x800) 22:07:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x7) 22:07:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:08 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x40) 22:07:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:08 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x40) 22:07:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240c0000}, 0x800) 22:07:08 executing program 3: getitimer(0x0, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x7) 22:07:08 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000300)='ns/time\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0211000002000000000000000f1e000064dd003bd5d891a7b68f3c4717f8a53700"/47], 0x17}}, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xffff, 0x12) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8, 0x401, {"2aabf04acd71fa25b00546923d3bcdb2"}, 0x9, 0x8000, 0x1000}}}, 0xa0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000200)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000140)) 22:07:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x7) 22:07:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240c0000}, 0x800) 22:07:09 executing program 3: getitimer(0x0, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:09 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000300)='ns/time\x00') (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0211000002000000000000000f1e000064dd003bd5d891a7b68f3c4717f8a53700"/47], 0x17}}, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xffff, 0x12) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8, 0x401, {"2aabf04acd71fa25b00546923d3bcdb2"}, 0x9, 0x8000, 0x1000}}}, 0xa0) (async) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000200)=0x8) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000140)) 22:07:09 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) syz_open_pts(r0, 0x418000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000080)=0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDSKBLED(r2, 0x4b65, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x8000000000000001) 22:07:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) 22:07:09 executing program 3: getitimer(0x0, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) getitimer(0x0, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) 22:07:09 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) syz_open_pts(r0, 0x418000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000080)=0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDSKBLED(r2, 0x4b65, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x8000000000000001) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) (async) syz_open_pts(r0, 0x418000) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000080)=0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) (async) ioctl$TCSBRK(r3, 0x5409, 0x8000000000000001) (async) 22:07:09 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r0, &(0x7f0000000300)='ns/time\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0211000002000000000000000f1e000064dd003bd5d891a7b68f3c4717f8a53700"/47], 0x17}}, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xffff, 0x12) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8, 0x401, {"2aabf04acd71fa25b00546923d3bcdb2"}, 0x9, 0x8000, 0x1000}}}, 0xa0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000200)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) (async) syz_open_procfs$namespace(r0, &(0x7f0000000300)='ns/time\x00') (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0211000002000000000000000f1e000064dd003bd5d891a7b68f3c4717f8a53700"/47], 0x17}}, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xffff, 0x12) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x8, 0x401, {"2aabf04acd71fa25b00546923d3bcdb2"}, 0x9, 0x8000, 0x1000}}}, 0xa0) (async) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000200)=0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000140)) (async) 22:07:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) 22:07:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2a40, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x100000001, 0x12) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:09 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_pts(r0, 0x14200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/84) 22:07:09 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) syz_open_pts(r0, 0x418000) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000080)=0x1) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x8000000000000001) 22:07:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2a40, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x100000001, 0x12) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) 22:07:09 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000040)=0x3) ioctl$KDSKBLED(r0, 0x4b65, 0x3) 22:07:09 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_pts(r0, 0x14200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/84) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_pts(r0, 0x14200) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r2, 0x541b, 0x0) (async) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/84) (async) 22:07:09 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2a40, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x100000001, 0x12) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_pts(r0, 0x14200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/84) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_pts(r0, 0x14200) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r2, 0x541b, 0x0) (async) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000080)=""/84) (async) 22:07:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000040)=0x3) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x3) 22:07:10 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:10 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000300)=0x6) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000280)={r3, 0x20, 0x80000001, 0x7ff, 0x7fff, 0x8561, 0x341d393a, 0x800, 0x40, 0x6, 0x3dc, 0x80000001}) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) 22:07:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:10 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], 0x1}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000300)=0x6) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000280)={r3, 0x20, 0x80000001, 0x7ff, 0x7fff, 0x8561, 0x341d393a, 0x800, 0x40, 0x6, 0x3dc, 0x80000001}) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async) 22:07:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000040)=0x3) ioctl$KDSKBLED(r0, 0x4b65, 0x3) 22:07:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) 22:07:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000300)=0x6) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000280)={r3, 0x20, 0x80000001, 0x7ff, 0x7fff, 0x8561, 0x341d393a, 0x800, 0x40, 0x6, 0x3dc, 0x80000001}) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], 0x1}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000300)=0x6) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000280)={r3, 0x20, 0x80000001, 0x7ff, 0x7fff, 0x8561, 0x341d393a, 0x800, 0x40, 0x6, 0x3dc, 0x80000001}) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) 22:07:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=""/186, 0xf9, 0xba}, 0x20) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:11 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000080)) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) 22:07:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x10000200) 22:07:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=""/186, 0xf9, 0xba}, 0x20) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:11 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="fe60f88ad3e0b075c63a99283fae60dea8f43fa17cbfe2ad024e65fbd962bdaeb1ffe838d8223faf9aa55c829ba4a6530f41ffd3c72c9d99f6b88b0047a7d5e80005f98bab2ba970e202bc6775787e0a8f5997c171deac8e3eb3e26374316c6f7770a44307feaf56d1681e78898fd32bf9287360a2c6b00ab935c900b52ad967a0ce1e9e3c3039706ac1b322d43f3eea31358a26ff85cf4066b925b7d60e0baec6586b3cfccfc19bbd1647f2c256c44d4a499911cb5b107daaaa03edb09b6914a423740da8fb2dc26106ef07c0ed0d1cb50c8dab173a60") 22:07:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x10000200) 22:07:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700ca403f2e66740bc8100d02f76325a3cd8d7c8023a779c8e5c85e7e45fead578b0b2bdb0cf0abededc7100000000000000019cea9fe21f4c55f484b193cd5a86c6e0aadfa3a7446980c5de18c08032d6ebf95e9ea0f92936e152a092dd91e0b43b71b50bb0762ca2185fe4136bb22a96003ace7c"], 0x17}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x5, 0x4, 0x18b3, @broadcast, 'veth0\x00'}) 22:07:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) 22:07:11 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="fe60f88ad3e0b075c63a99283fae60dea8f43fa17cbfe2ad024e65fbd962bdaeb1ffe838d8223faf9aa55c829ba4a6530f41ffd3c72c9d99f6b88b0047a7d5e80005f98bab2ba970e202bc6775787e0a8f5997c171deac8e3eb3e26374316c6f7770a44307feaf56d1681e78898fd32bf9287360a2c6b00ab935c900b52ad967a0ce1e9e3c3039706ac1b322d43f3eea31358a26ff85cf4066b925b7d60e0baec6586b3cfccfc19bbd1647f2c256c44d4a499911cb5b107daaaa03edb09b6914a423740da8fb2dc26106ef07c0ed0d1cb50c8dab173a60") syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="fe60f88ad3e0b075c63a99283fae60dea8f43fa17cbfe2ad024e65fbd962bdaeb1ffe838d8223faf9aa55c829ba4a6530f41ffd3c72c9d99f6b88b0047a7d5e80005f98bab2ba970e202bc6775787e0a8f5997c171deac8e3eb3e26374316c6f7770a44307feaf56d1681e78898fd32bf9287360a2c6b00ab935c900b52ad967a0ce1e9e3c3039706ac1b322d43f3eea31358a26ff85cf4066b925b7d60e0baec6586b3cfccfc19bbd1647f2c256c44d4a499911cb5b107daaaa03edb09b6914a423740da8fb2dc26106ef07c0ed0d1cb50c8dab173a60") (async) 22:07:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x10000200) 22:07:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=""/186, 0xf9, 0xba}, 0x20) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700ca403f2e66740bc8100d02f76325a3cd8d7c8023a779c8e5c85e7e45fead578b0b2bdb0cf0abededc7100000000000000019cea9fe21f4c55f484b193cd5a86c6e0aadfa3a7446980c5de18c08032d6ebf95e9ea0f92936e152a092dd91e0b43b71b50bb0762ca2185fe4136bb22a96003ace7c"], 0x17}}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x5, 0x4, 0x18b3, @broadcast, 'veth0\x00'}) 22:07:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) 22:07:11 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="fe60f88ad3e0b075c63a99283fae60dea8f43fa17cbfe2ad024e65fbd962bdaeb1ffe838d8223faf9aa55c829ba4a6530f41ffd3c72c9d99f6b88b0047a7d5e80005f98bab2ba970e202bc6775787e0a8f5997c171deac8e3eb3e26374316c6f7770a44307feaf56d1681e78898fd32bf9287360a2c6b00ab935c900b52ad967a0ce1e9e3c3039706ac1b322d43f3eea31358a26ff85cf4066b925b7d60e0baec6586b3cfccfc19bbd1647f2c256c44d4a499911cb5b107daaaa03edb09b6914a423740da8fb2dc26106ef07c0ed0d1cb50c8dab173a60") 22:07:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4185c1, 0x0) 22:07:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 5: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700ca403f2e66740bc8100d02f76325a3cd8d7c8023a779c8e5c85e7e45fead578b0b2bdb0cf0abededc7100000000000000019cea9fe21f4c55f484b193cd5a86c6e0aadfa3a7446980c5de18c08032d6ebf95e9ea0f92936e152a092dd91e0b43b71b50bb0762ca2185fe4136bb22a96003ace7c"], 0x17}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x5, 0x4, 0x18b3, @broadcast, 'veth0\x00'}) 22:07:11 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4185c1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4185c1, 0x0) (async) 22:07:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0xf, 0x0, 0x3, 0x2}, 0x10}}, 0x0) 22:07:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4185c1, 0x0) 22:07:11 executing program 5: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:07:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0xf, 0x0, 0x3, 0x2}, 0x10}}, 0x0) 22:07:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x26ac00, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x32) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:12 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:12 executing program 5: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0xf, 0x0, 0x3, 0x2}, 0x10}}, 0x0) 22:07:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xc) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x26ac00, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x32) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xc) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x26ac00, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x32) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:12 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30002, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000040)=0x4) ioctl$TIOCEXCL(r0, 0x540c) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/50) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021f0000ffff03000000c1e300000000"], 0x17}}, 0x0) 22:07:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30002, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000040)=0x4) ioctl$TIOCEXCL(r0, 0x540c) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30002, 0x0) (async) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000040)=0x4) (async) ioctl$TIOCEXCL(r0, 0x540c) (async) 22:07:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r2, 0x80047437, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000004c0)) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x17) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x2, 0xc, 0x167, &(0x7f0000000080)}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@bcast) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/50) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021f0000ffff03000000c1e300000000"], 0x17}}, 0x0) 22:07:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30002, 0x0) ioctl$TIOCPKT(r1, 0x80045438, &(0x7f0000000040)=0x4) (async) ioctl$TIOCEXCL(r0, 0x540c) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/50) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021f0000ffff03000000c1e300000000"], 0x17}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/50) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021f0000ffff03000000c1e300000000"], 0x17}}, 0x0) (async) 22:07:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r2, 0x80047437, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000004c0)) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r1, 0x40045436, 0x17) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x2, 0xc, 0x167, &(0x7f0000000080)}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@bcast) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000004c0)) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x17) (async) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x2, 0xc, 0x167, &(0x7f0000000080)}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@bcast) (async) 22:07:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x10140) getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000000)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$TIOCPKT(r3, 0x80045438, &(0x7f0000000000)=0x10001) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02110000400d38fe0000008838e36629f9c6a5f14a00099841989699c4651550379cec3e86a8340e1fa0e91cab05b92b5b3b8468878f3c48fe5235de892820f56315e49d0860f01803919ba0ded1854c4524f05a8782fbdd61a3e52f5f358a73e2d7f23d11d48fb58be60e44ffbc025aa9d45397bc445ed665720ee0a86726c49dfb2ad0a6"], 0x17}}, 0x0) 22:07:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:12 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000004c0)) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x17) (async) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x2, 0xc, 0x167, &(0x7f0000000080)}) (async, rerun: 64) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@bcast) 22:07:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x10140) getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000000)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$TIOCPKT(r3, 0x80045438, &(0x7f0000000000)=0x10001) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r0, 0x10140) (async) getpid() (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) getpid() (async) sched_rr_get_interval(r2, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) (async) ioctl$TIOCPKT(r3, 0x80045438, &(0x7f0000000000)=0x10001) (async) 22:07:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02110000400d38fe0000008838e36629f9c6a5f14a00099841989699c4651550379cec3e86a8340e1fa0e91cab05b92b5b3b8468878f3c48fe5235de892820f56315e49d0860f01803919ba0ded1854c4524f05a8782fbdd61a3e52f5f358a73e2d7f23d11d48fb58be60e44ffbc025aa9d45397bc445ed665720ee0a86726c49dfb2ad0a6"], 0x17}}, 0x0) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02110000400d38fe0000008838e36629f9c6a5f14a00099841989699c4651550379cec3e86a8340e1fa0e91cab05b92b5b3b8468878f3c48fe5235de892820f56315e49d0860f01803919ba0ded1854c4524f05a8782fbdd61a3e52f5f358a73e2d7f23d11d48fb58be60e44ffbc025aa9d45397bc445ed665720ee0a86726c49dfb2ad0a6"], 0x17}}, 0x0) 22:07:12 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x10140) getpid() (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000000)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$TIOCPKT(r3, 0x80045438, &(0x7f0000000000)=0x10001) 22:07:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) (async, rerun: 64) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (rerun: 64) 22:07:13 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:13 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) 22:07:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 22:07:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:13 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8003) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xb, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/106, 0x29, 0x6a}, 0x20) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 22:07:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 22:07:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) 22:07:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8003) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xb, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/106, 0x29, 0x6a}, 0x20) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) (rerun: 64) 22:07:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) 22:07:13 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xe250) 22:07:13 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8003) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0xb, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/106, 0x29, 0x6a}, 0x20) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 22:07:14 executing program 2: r0 = fanotify_init(0x0, 0x38dffdf9b72c5288) fanotify_mark(r0, 0x200, 0x20, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$rose(r2, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$khugepaged_scan(r2, &(0x7f0000000080), 0x8) 22:07:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) 22:07:14 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xe250) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xe250) (async) 22:07:14 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 22:07:14 executing program 2: r0 = fanotify_init(0x0, 0x38dffdf9b72c5288) fanotify_mark(r0, 0x200, 0x20, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$rose(r2, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$khugepaged_scan(r2, &(0x7f0000000080), 0x8) 22:07:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000007ed4ed88c2cc0e21bc00080000"], 0x17}}, 0x0) 22:07:14 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:14 executing program 2: r0 = fanotify_init(0x0, 0x38dffdf9b72c5288) fanotify_mark(r0, 0x200, 0x20, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$rose(r2, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$khugepaged_scan(r2, &(0x7f0000000080), 0x8) fanotify_init(0x0, 0x38dffdf9b72c5288) (async) fanotify_mark(r0, 0x200, 0x20, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bind$rose(r2, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$khugepaged_scan(r2, &(0x7f0000000080), 0x8) (async) 22:07:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xe250) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xe250) (async) 22:07:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:14 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000007ed4ed88c2cc0e21bc00080000"], 0x17}}, 0x0) 22:07:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:14 executing program 5: ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x5, 0x9a63}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x7}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f00000000c0)=0x800000) 22:07:14 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:14 executing program 5: ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x5, 0x9a63}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x7}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f00000000c0)=0x800000) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x5, 0x9a63}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x7}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f00000000c0)=0x800000) (async) 22:07:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000007ed4ed88c2cc0e21bc00080000"], 0x17}}, 0x0) 22:07:14 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 22:07:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socketpair(0xa, 0x80000, 0x7f, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021100000200000000000000b7380000"], 0x17}}, 0x0) socketpair(0x1f, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) 22:07:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 5: ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x5, 0x9a63}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x7}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f00000000c0)=0x800000) 22:07:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) socketpair(0xa, 0x80000, 0x7f, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021100000200000000000000b7380000"], 0x17}}, 0x0) socketpair(0x1f, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) 22:07:15 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x18) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000040)={0xf66, 0x7, 0x401, 0x6, 0x7}) 22:07:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:15 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) socketpair(0xa, 0x80000, 0x7f, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="021100000200000000000000b7380000"], 0x17}}, 0x0) socketpair(0x1f, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)) 22:07:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x18) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000040)={0xf66, 0x7, 0x401, 0x6, 0x7}) 22:07:15 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x18) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000040)={0xf66, 0x7, 0x401, 0x6, 0x7}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x18) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000040)={0xf66, 0x7, 0x401, 0x6, 0x7}) (async) 22:07:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xf8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x48}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x10fb}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc7, 0xbe, "205e8c0de37beb8c4e576e8aa34e66a2963bdcf0efb9cb6a8b023e2b5d7f0e7e56ee41aed33ddd8c0b7806bb5d396a4a035e50b5ed36f00e263521675259f43e612c68f4ef14e51ddcbc7e44e763ea149d94186440d14263e7fc80fae3b8e6eef6b2e29440cb26e71e62f8e9e05444b626db28620efa706198066ea021f87e324c7b81f94277e9362dd3176d12988552fb4159234a2e468059864086e80bb3dc2a9976881c52cd90a6a738a500d8c0ffdc80e01f62e7535e1962a6427c054415df4ed3"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0xc4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000840)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2d0c00, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000740)={r2, 0x2, 0x1ff, "dc0176b1c3de6ff5a908be4fa6a2a29c1a790e405ea9fcdeb55636f69b8a0b24a32973609c8e2ea38f7bbb114a7ea406fcf1eccded6053f23b05e42cccd9753df3b0a0d824b728b93f9df4e2f6f5cd13e32b2e070464931dad7790e79c806dd4ecb32c0a6a134666111ece4f54a5b8ab8e5fc159daede1c0dbd22927929f7b18706344057b0ce85203dad743fb30825abf9afb374676de008b676eb3f09d7aa42483af794fec64056f150ff0431371bcf98be4b132fc81c8408ac07cdf583425fa969125e821163a41b32369cc57506f91d0000eb05392b30feabf"}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xd, 0x5, 0x13a, &(0x7f0000000240)="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"}) 22:07:15 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0xfffffff8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0xcc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) 22:07:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:15 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0xcc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0xcc) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) (async) 22:07:15 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) [ 1716.288566] sp1: Synchronizing with TNC 22:07:15 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xf8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x48}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x10fb}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc7, 0xbe, "205e8c0de37beb8c4e576e8aa34e66a2963bdcf0efb9cb6a8b023e2b5d7f0e7e56ee41aed33ddd8c0b7806bb5d396a4a035e50b5ed36f00e263521675259f43e612c68f4ef14e51ddcbc7e44e763ea149d94186440d14263e7fc80fae3b8e6eef6b2e29440cb26e71e62f8e9e05444b626db28620efa706198066ea021f87e324c7b81f94277e9362dd3176d12988552fb4159234a2e468059864086e80bb3dc2a9976881c52cd90a6a738a500d8c0ffdc80e01f62e7535e1962a6427c054415df4ed3"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0xc4) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000840)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async, rerun: 64) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) (async, rerun: 64) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2d0c00, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000740)={r2, 0x2, 0x1ff, "dc0176b1c3de6ff5a908be4fa6a2a29c1a790e405ea9fcdeb55636f69b8a0b24a32973609c8e2ea38f7bbb114a7ea406fcf1eccded6053f23b05e42cccd9753df3b0a0d824b728b93f9df4e2f6f5cd13e32b2e070464931dad7790e79c806dd4ecb32c0a6a134666111ece4f54a5b8ab8e5fc159daede1c0dbd22927929f7b18706344057b0ce85203dad743fb30825abf9afb374676de008b676eb3f09d7aa42483af794fec64056f150ff0431371bcf98be4b132fc81c8408ac07cdf583425fa969125e821163a41b32369cc57506f91d0000eb05392b30feabf"}) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xd, 0x5, 0x13a, &(0x7f0000000240)="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"}) 22:07:15 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xc0) 22:07:15 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) (async) 22:07:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0xcc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0xcc) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) (async) 22:07:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 1716.462370] sp1: Synchronizing with TNC 22:07:15 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:15 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="fd6c04e0aa0af36a83d5591ea37a3413b9ab89f50fe9637a49d51f91db21fee6bd1cd8709bb2bcfd0884f7e354bc69e214b5") 22:07:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 22:07:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xf8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x48}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x10fb}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc7, 0xbe, "205e8c0de37beb8c4e576e8aa34e66a2963bdcf0efb9cb6a8b023e2b5d7f0e7e56ee41aed33ddd8c0b7806bb5d396a4a035e50b5ed36f00e263521675259f43e612c68f4ef14e51ddcbc7e44e763ea149d94186440d14263e7fc80fae3b8e6eef6b2e29440cb26e71e62f8e9e05444b626db28620efa706198066ea021f87e324c7b81f94277e9362dd3176d12988552fb4159234a2e468059864086e80bb3dc2a9976881c52cd90a6a738a500d8c0ffdc80e01f62e7535e1962a6427c054415df4ed3"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0xc4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000840)) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2d0c00, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000740)={r2, 0x2, 0x1ff, "dc0176b1c3de6ff5a908be4fa6a2a29c1a790e405ea9fcdeb55636f69b8a0b24a32973609c8e2ea38f7bbb114a7ea406fcf1eccded6053f23b05e42cccd9753df3b0a0d824b728b93f9df4e2f6f5cd13e32b2e070464931dad7790e79c806dd4ecb32c0a6a134666111ece4f54a5b8ab8e5fc159daede1c0dbd22927929f7b18706344057b0ce85203dad743fb30825abf9afb374676de008b676eb3f09d7aa42483af794fec64056f150ff0431371bcf98be4b132fc81c8408ac07cdf583425fa969125e821163a41b32369cc57506f91d0000eb05392b30feabf"}) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xd, 0x5, 0x13a, &(0x7f0000000240)="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"}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xf8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x48}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x10fb}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc7, 0xbe, "205e8c0de37beb8c4e576e8aa34e66a2963bdcf0efb9cb6a8b023e2b5d7f0e7e56ee41aed33ddd8c0b7806bb5d396a4a035e50b5ed36f00e263521675259f43e612c68f4ef14e51ddcbc7e44e763ea149d94186440d14263e7fc80fae3b8e6eef6b2e29440cb26e71e62f8e9e05444b626db28620efa706198066ea021f87e324c7b81f94277e9362dd3176d12988552fb4159234a2e468059864086e80bb3dc2a9976881c52cd90a6a738a500d8c0ffdc80e01f62e7535e1962a6427c054415df4ed3"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0xc4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000840)) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2d0c00, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000740)={r2, 0x2, 0x1ff, "dc0176b1c3de6ff5a908be4fa6a2a29c1a790e405ea9fcdeb55636f69b8a0b24a32973609c8e2ea38f7bbb114a7ea406fcf1eccded6053f23b05e42cccd9753df3b0a0d824b728b93f9df4e2f6f5cd13e32b2e070464931dad7790e79c806dd4ecb32c0a6a134666111ece4f54a5b8ab8e5fc159daede1c0dbd22927929f7b18706344057b0ce85203dad743fb30825abf9afb374676de008b676eb3f09d7aa42483af794fec64056f150ff0431371bcf98be4b132fc81c8408ac07cdf583425fa969125e821163a41b32369cc57506f91d0000eb05392b30feabf"}) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xd, 0x5, 0x13a, &(0x7f0000000240)="1c2f8c4527641b29b79769e0f3fae445deeb329bc56d9b702e6cd524aa9ba602ed3dd35c9a5c1e569849fada0605c6bdc7320c2347a046b1a0252978f5c62ec6f7fb22ee51de0b8bf56d9ccb53b4b75e6bcad32d1f85082a432f9372677d383ab92e48a7df3cf1d0a2abe6452cb0e48982d32a4833f0959c1ff3872dbde831b6597bf1e239750af1ba6a7b4765e6c0fc47d3c37e3ca61a6747a51440fd936d2a1ab40ee8888bf08f3f02ecab44dc3dd681f62b8461204bd580b52bb1ae9da6d10f777c9e349e860c79beb777b99541d2c15f40d592ed3b2aaecddde5430713adc2433a118f867b74061fd84e47487c3acb9095b2828182ce51c306b47c28451aea2fda5b4116ce80a9693b6a52b79353bb0d7a8d4ebfa6b3c0505ccef6433281321c72dacfd48d3b5a4b17daded5f6e18656c56299e35a718b76d322fafb69dca2643a6c1360a3d74d4104fbfe420b52b75283a4ea2e40ae7024cdd155c6968f51a9dba7bcd411ee39882f5074c2260c8e51eb8c05b5a264df83534e6cf14ddfb4527a37b053a3068a253341ab0db38bc0e8e9bc811340e18c4befb2bbc7fed8a2d37d15bc4dba803078404b5f21dbc0fbc1806bb3da09c57cc7c5b8ba6598a22d55f7785681add6106061089aa9c07008456a8c7779e2efbe10526dc652b3c55779781c36d409cf712b4d033171add3e7939249cc572161c2831823775ead34899c2903a7dab8b996e67e8cdcd15817182e3795724c38597dfb24d5e4b5f49ea6bf11fc496f8edd46017e9140b1970a11869bb604313a7a7915973912f23d2af4d3c1876972bab549a739bc35f06a7ea443b213d7c15783dad42c91958b5827824497ab090558f746da05c0cb3a0c747a8445a1155745405a0eacd9eb1ac5144961ae85e8240b3aaed95d5a5432ae1512c076c2d7f704442bb49e2907dad3aa87e2d63b9b8d9e354e2816436772266aa276009c9bc477feafc4eba8c8975c95ef44685fa8a5aaab71630df1689eef1a76579d2a68eb1eccca988d1ef0cc601aecfa28a402826a9d5a3958b754874efa981af8b4c3513b5174866b4b979f9cc887f67b1ad4bde66064af2f5dffb4352f2ab5218a23f2b0386ec1972d2982a3688f95cd6b34f859b1173572dd6b2587b5fee795a3e984993caa24e6c298545e594e4b982a3c80a541995163df828f2d09bb8a854409ec400c784f5bb6e57b0b54ad7e9ff429a54200ec153e7e4929de1435fdd1e56aafb91847a2a9fc04fdbb3f91ed5e1475a293a08b72e98aafe2fb4c6b0ec44769439596b081fc5856bd0f507a4d2c89227bce518530af9c6c132d8afc0b87c16adb3b0f5a1bf96b0afd0278147e1ebc71acb3b186de145f6befa4ebe7dad06e144a098a2fc5b179e2b67ea36df18f4e7d0cf1a9f2fdd9392ca4572002d5b7aab74363f6e84aec137e535ff1"}) (async) [ 1716.677536] sp1: Synchronizing with TNC 22:07:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:16 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="fd6c04e0aa0af36a83d5591ea37a3413b9ab89f50fe9637a49d51f91db21fee6bd1cd8709bb2bcfd0884f7e354bc69e214b5") 22:07:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:16 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 22:07:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x1f, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x2400c011) 22:07:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x1f, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x2400c011) 22:07:16 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 22:07:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:16 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="fd6c04e0aa0af36a83d5591ea37a3413b9ab89f50fe9637a49d51f91db21fee6bd1cd8709bb2bcfd0884f7e354bc69e214b5") 22:07:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 22:07:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 22:07:17 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 22:07:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x1f, 0x0, 0x2}, 0x10}}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x2400c011) 22:07:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x38302, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000881) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="021100ea000000007d5cde6248ddbe66"], 0x17}}, 0x20000000) 22:07:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 22:07:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x38302, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000881) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r0, 0x5407, 0x0) 22:07:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="021100ea000000007d5cde6248ddbe66"], 0x17}}, 0x20000000) 22:07:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 32) ioctl$FIONREAD(r0, 0x80047437, 0x0) (rerun: 32) 22:07:17 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x15, 0x4, 0x1b5, &(0x7f0000000080)}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_open_pts(r0, 0x218002) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000540)) ioctl$FIONREAD(r3, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 22:07:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) 22:07:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x38302, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000881) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x38302, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000881) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:07:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="021100ea000000007d5cde6248ddbe66"], 0x17}}, 0x20000000) 22:07:17 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x40) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x100, 0x1}) 22:07:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x20000b) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x40) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x100, 0x1}) 22:07:17 executing program 4: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r3 = accept4$rose(r2, &(0x7f0000000140)=@full={0xb, @remote, @bcast, 0x0, [@rose, @bcast, @bcast, @remote, @netrom, @bcast]}, &(0x7f0000000180)=0x40, 0x80800) recvfrom$rose(r3, &(0x7f0000000240)=""/94, 0x5e, 0x20000000, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000100)) 22:07:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x91b, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0xa639, {"0d1b1037c614d2980ec106477ec05444"}, 0x100000000, 0x9, 0x8dc9}, @ib={0x1b, 0x3ff, 0x3, {"8afdbe46cc2d5d48466b5f37e5efd520"}, 0x7, 0x9, 0x80000000}}}, 0x118) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7, 0x3}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x5, 0x1, 0x80}) 22:07:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x6b7302cfbc1f9046) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@rand_addr, @dev}, &(0x7f0000000240)=0xc) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) 22:07:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x20000b) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:18 executing program 4: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x3) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r3 = accept4$rose(r2, &(0x7f0000000140)=@full={0xb, @remote, @bcast, 0x0, [@rose, @bcast, @bcast, @remote, @netrom, @bcast]}, &(0x7f0000000180)=0x40, 0x80800) recvfrom$rose(r3, &(0x7f0000000240)=""/94, 0x5e, 0x20000000, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async, rerun: 64) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000100)) (rerun: 64) 22:07:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x91b, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0xa639, {"0d1b1037c614d2980ec106477ec05444"}, 0x100000000, 0x9, 0x8dc9}, @ib={0x1b, 0x3ff, 0x3, {"8afdbe46cc2d5d48466b5f37e5efd520"}, 0x7, 0x9, 0x80000000}}}, 0x118) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:18 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x91b, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0xa639, {"0d1b1037c614d2980ec106477ec05444"}, 0x100000000, 0x9, 0x8dc9}, @ib={0x1b, 0x3ff, 0x3, {"8afdbe46cc2d5d48466b5f37e5efd520"}, 0x7, 0x9, 0x80000000}}}, 0x118) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x20000b) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x20000b) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:18 executing program 4: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async, rerun: 32) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x3) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) (async, rerun: 64) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (rerun: 64) r3 = accept4$rose(r2, &(0x7f0000000140)=@full={0xb, @remote, @bcast, 0x0, [@rose, @bcast, @bcast, @remote, @netrom, @bcast]}, &(0x7f0000000180)=0x40, 0x80800) recvfrom$rose(r3, &(0x7f0000000240)=""/94, 0x5e, 0x20000000, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000100)) 22:07:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4c01, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x4, 0x6, 0x4, 0x3f, 0x8, "0cab9ab87ba01753"}) 22:07:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5800e5503773f7d84326"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad3c7c512c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3149fd6e63a8e94ad8b6f23c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/189) 22:07:18 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x800, 0x7fffffff}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="3ce9b191a98a3eabc5679931f4ee581b0134f4092b6c7352fb075ebf075c4deeb5c5ee245d848d") 22:07:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5800e5503773f7d84326"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad3c7c512c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3149fd6e63a8e94ad8b6f23c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/189) 22:07:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3f, 0x5, 0x2}) 22:07:18 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDENABIO(r1, 0x4b36) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="3ce9b191a98a3eabc5679931f4ee581b0134f4092b6c7352fb075ebf075c4deeb5c5ee245d848d") (rerun: 64) 22:07:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) 22:07:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x800, 0x7fffffff}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x800, 0x7fffffff}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:07:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4103) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x2, 0x1, 0x7, 0x1000, 0x14, &(0x7f0000000280)="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"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r2, 0x40045436, 0x8) socketpair(0x6, 0x1, 0x81, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRK(r1, 0x5409, 0x1f) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x64) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) ioctl$KDSKBLED(r1, 0x4b65, 0x5) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4008018) read$snapshot(r4, &(0x7f0000000780)=""/143, 0x8f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) 22:07:18 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5800e5503773f7d84326"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad3c7c512c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3149fd6e63a8e94ad8b6f23c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/189) 22:07:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="3ce9b191a98a3eabc5679931f4ee581b0134f4092b6c7352fb075ebf075c4deeb5c5ee245d848d") 22:07:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) (async) socket$key(0xf, 0x3, 0x2) (async) 22:07:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x800, 0x7fffffff}) (async, rerun: 64) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (rerun: 64) 22:07:18 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:18 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:18 executing program 2: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@default) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) (async) socket$key(0xf, 0x3, 0x2) (async) 22:07:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x79}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "5800e5503773f7d84326"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad3c7c512c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3149fd6e63a8e94ad8b6f23c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000084) 22:07:18 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/49) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x185201, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x4001) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x442440, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x18) 22:07:18 executing program 2: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@default) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@default) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:18 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 22:07:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) 22:07:19 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/49) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x185201, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x4001) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x442440, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x18) 22:07:19 executing program 2: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@default) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) 22:07:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 22:07:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/49) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x185201, 0x0) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x4001) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x442440, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 32) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x18) (rerun: 32) 22:07:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) 22:07:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) socket$nl_generic(0x10, 0x3, 0x10) 22:07:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x62) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) pkey_free(0xffffffffffffffff) 22:07:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r4, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) 22:07:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x62) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:19 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) sendto$rose(r3, &(0x7f0000000280)="9476371d1199b402e2a3aa83655d4512191f13e5ed9163088605d19490e520ec14f578f4ef07bd6db30c730e2fc04683e42b3e7d4b7012b0328bd960d6c4d75912556cf0f65476eda387cfd7b2c03cd480299e4a263adb886a74446b796ca8eb76bdef847d2be9475e03caf1dd23eb2e85afa89704682773b293c1187ecb098861a8b85d989b1b35ea8c0377a0ff5ef551e680c8c5ee92fad7827ef420bcc5e11a4619d90454d6ac2d78ce057cbde69700b2269a53f17a8fdafdf82a901c15d1a1e2a0ae021a160f0c2278a02e7d0b49da19c5159e4b820e8eb6de4893134a310c5d1eaec995db1b7802d2", 0xeb, 0x4005, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) 22:07:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) pkey_free(0xffffffffffffffff) 22:07:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) ioctl$KDSKBLED(r0, 0x4b65, 0x83ba) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@func={0xf, 0x0, 0x0, 0xc, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x69, 0x1}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x80000001}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0xdc, 0x30, 0x30, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000100)=""/159, 0x90, 0x9f}, 0x20) 22:07:19 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x62) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x62) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) 22:07:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) 22:07:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) pkey_free(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) pkey_free(0xffffffffffffffff) (async) 22:07:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/126, 0xbc) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x17, 0x20, 0x9, 0x39, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_key={0x19, 0x9, 0x5d0, 0x0, "4c06337c8315b74d0b22cad4630a730a8d6ad61f54d2028dc04f4d6c84f6d6090208bdf27234360de4653a243234afe4f4652a3fb9d379300bcd74e83c445f408447efeb7d21435c6775a2a670cca5d913e6e280974ffbef6aa350db1e27b205e0a58346bc190ae74b4c73bacc67fab381116f6a81d5c8c3d5a211f0a2ac6dcdff6d42806bff8faa08061ca1a8a8b1afe6a832f4031a807a25cb989359d8062dd34b0feb7bc949dfefb0a4af09ca8805aa7b4beeb834d2defe5d"}, @sadb_sa={0x2, 0x1, 0x4d5, 0xb4, 0x1f, 0x5e, 0x0, 0x10000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @remote, 0x7b0}}, @sadb_lifetime={0x4, 0x2, 0x8000, 0x2dc400000000, 0x9, 0x1cb5}, @sadb_key={0xc, 0x9, 0x2b0, 0x0, "3fa4c4ba53653e9fe9c49cfcb87834bac802d54a2885eb1685a148ebb4ebef93cfdce26524a9e423156567b71173fde867378c15c61a029fce818e54e263112a4a5ec705052357e0054a95e7f74853163b0d9302a8f7"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x1c8}}, 0x44000) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f00000001c0)) 22:07:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x83ba) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@func={0xf, 0x0, 0x0, 0xc, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x69, 0x1}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x80000001}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0xdc, 0x30, 0x30, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000100)=""/159, 0x90, 0x9f}, 0x20) 22:07:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:19 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x9, 0x7fff, 0x401}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x84142, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000080)=@rose) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xbe) 22:07:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/126, 0xbc) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x17, 0x20, 0x9, 0x39, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_key={0x19, 0x9, 0x5d0, 0x0, "4c06337c8315b74d0b22cad4630a730a8d6ad61f54d2028dc04f4d6c84f6d6090208bdf27234360de4653a243234afe4f4652a3fb9d379300bcd74e83c445f408447efeb7d21435c6775a2a670cca5d913e6e280974ffbef6aa350db1e27b205e0a58346bc190ae74b4c73bacc67fab381116f6a81d5c8c3d5a211f0a2ac6dcdff6d42806bff8faa08061ca1a8a8b1afe6a832f4031a807a25cb989359d8062dd34b0feb7bc949dfefb0a4af09ca8805aa7b4beeb834d2defe5d"}, @sadb_sa={0x2, 0x1, 0x4d5, 0xb4, 0x1f, 0x5e, 0x0, 0x10000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @remote, 0x7b0}}, @sadb_lifetime={0x4, 0x2, 0x8000, 0x2dc400000000, 0x9, 0x1cb5}, @sadb_key={0xc, 0x9, 0x2b0, 0x0, "3fa4c4ba53653e9fe9c49cfcb87834bac802d54a2885eb1685a148ebb4ebef93cfdce26524a9e423156567b71173fde867378c15c61a029fce818e54e263112a4a5ec705052357e0054a95e7f74853163b0d9302a8f7"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x1c8}}, 0x44000) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f00000001c0)) socket$key(0xf, 0x3, 0x2) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000140)=""/126, 0xbc) (async) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x17, 0x20, 0x9, 0x39, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_key={0x19, 0x9, 0x5d0, 0x0, "4c06337c8315b74d0b22cad4630a730a8d6ad61f54d2028dc04f4d6c84f6d6090208bdf27234360de4653a243234afe4f4652a3fb9d379300bcd74e83c445f408447efeb7d21435c6775a2a670cca5d913e6e280974ffbef6aa350db1e27b205e0a58346bc190ae74b4c73bacc67fab381116f6a81d5c8c3d5a211f0a2ac6dcdff6d42806bff8faa08061ca1a8a8b1afe6a832f4031a807a25cb989359d8062dd34b0feb7bc949dfefb0a4af09ca8805aa7b4beeb834d2defe5d"}, @sadb_sa={0x2, 0x1, 0x4d5, 0xb4, 0x1f, 0x5e, 0x0, 0x10000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @remote, 0x7b0}}, @sadb_lifetime={0x4, 0x2, 0x8000, 0x2dc400000000, 0x9, 0x1cb5}, @sadb_key={0xc, 0x9, 0x2b0, 0x0, "3fa4c4ba53653e9fe9c49cfcb87834bac802d54a2885eb1685a148ebb4ebef93cfdce26524a9e423156567b71173fde867378c15c61a029fce818e54e263112a4a5ec705052357e0054a95e7f74853163b0d9302a8f7"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x1c8}}, 0x44000) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f00000001c0)) (async) 22:07:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) ioctl$KDSKBLED(r0, 0x4b65, 0x83ba) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@func={0xf, 0x0, 0x0, 0xc, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x69, 0x1}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x80000001}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0xdc, 0x30, 0x30, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000100)=""/159, 0x90, 0x9f}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x83ba) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x8, [@func={0xf, 0x0, 0x0, 0xc, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x69, 0x1}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x80000001}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0xdc, 0x30, 0x30, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000100)=""/159, 0x90, 0x9f}, 0x20) (async) 22:07:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x9, 0x7fff, 0x401}) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x84142, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000080)=@rose) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xbe) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x9, 0x7fff, 0x401}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x84142, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000080)=@rose) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xbe) (async) 22:07:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/126, 0xbc) (async, rerun: 32) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x17, 0x20, 0x9, 0x39, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_key={0x19, 0x9, 0x5d0, 0x0, "4c06337c8315b74d0b22cad4630a730a8d6ad61f54d2028dc04f4d6c84f6d6090208bdf27234360de4653a243234afe4f4652a3fb9d379300bcd74e83c445f408447efeb7d21435c6775a2a670cca5d913e6e280974ffbef6aa350db1e27b205e0a58346bc190ae74b4c73bacc67fab381116f6a81d5c8c3d5a211f0a2ac6dcdff6d42806bff8faa08061ca1a8a8b1afe6a832f4031a807a25cb989359d8062dd34b0feb7bc949dfefb0a4af09ca8805aa7b4beeb834d2defe5d"}, @sadb_sa={0x2, 0x1, 0x4d5, 0xb4, 0x1f, 0x5e, 0x0, 0x10000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @remote, 0x7b0}}, @sadb_lifetime={0x4, 0x2, 0x8000, 0x2dc400000000, 0x9, 0x1cb5}, @sadb_key={0xc, 0x9, 0x2b0, 0x0, "3fa4c4ba53653e9fe9c49cfcb87834bac802d54a2885eb1685a148ebb4ebef93cfdce26524a9e423156567b71173fde867378c15c61a029fce818e54e263112a4a5ec705052357e0054a95e7f74853163b0d9302a8f7"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x1c8}}, 0x44000) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f00000001c0)) 22:07:20 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc082, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x1006) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000040)) 22:07:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) 22:07:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x9, 0x7fff, 0x401}) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x84142, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000080)=@rose) (async, rerun: 32) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xbe) 22:07:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:20 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc082, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x1006) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000040)) 22:07:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) 22:07:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x209) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1f, 0xe, 0xe, &(0x7f0000000080)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000900)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x20, 0x8, 0x123, &(0x7f00000004c0)="99e91c5ab4763559141167629c8f2abfe9caa781fc475fba6a438695430d4b9565fa8568caa1416e46d418bcf8c4422aecb19705ddbaa8f6772ef6c262b3314ae94463e8e3a4d947925459b0e61f131733a1f3299d43072602b68e8e3818707f534a344379d69bfd81a2a60bf4b417d24380741ab8528e22dbec22ff736c44eeca6d3809a8c37925e72b8a360978b9fe1668af3d6787b6a79f02b4a75527c9889d656324444e54496d4043f18b0e222826d5f1f1a79022eb1f88ef8c2b83357b9c36e2dfe003af78459f03233d339addb4bfc631b3dc43f4fe4c5812040bbba844ea33e4d7a93539e4f6c444cdadcd26ed975bd03c4dc4cffd9bbef07b7c0c39b2acb790b30995182ce7ac3a4b69d8bb29e75dc553212b2b7aaf75867e94ee8cf1c935df8be85339e09a0eb144950d07732ec8599522dbb8e5da467badb92c72c66a765e3820b3c41a843292711fa3b7fbdf6754861859f49c3d6565a6811ae904a40374340c11213a577c1b0f32c26c80932f3ac950430cb60cedd8a8289f544130482fa184db830dec39912a25e87beda1c3c910e7f59a02bcf1c59c46787e8372063cfd5e18ebe26e328df299792fadd6499a73f93c7249d1919779c9fa62575db14a3c74e6e27e81e6a7807a3c81be7e6738505ad667f0e55392ad79ecc05746169bdb0a359ce32fe66693f91ec76875c257db2ba5c4e69149a6867241c24ade228d1095228067ffe8b7f755ee8b88aa43b64e4c6b7015a4ec80b494de7bdf9875f124e5649055f2b6408366f280284888dca18478ba237f712b816ca80df94edb2085faa4d51e55dbc0475fd120403837686eaa62624808be2f04b0723ca017391ccbbc716d0504a002f4d14003b4ac26ffbc94c77b65c0ecc0285ac8286706fbfadc0abf89e0cec9e59cea538b05d83525ea4a7a53b204ae9b455c6fd1c05189a76de92e87ee5c6dd8e4af5dab1f779ca47f04851ba270fd6ba56219cd79e11ac3710ff6be14f0dd864b909b3ee3cb77699cca96c1cea0805913c56907eef6870ffcc980be937a1c5d0b6678022806837d2291b2d49f98d63c8e5c81bb2ccc9a06a5307412052a83d5b5a99a68973bd0ca1e33804208568b133b2dd18ac16b8a23b9fdc4b00f19c829b44f71923aa6ca29ce67d962ddae04ba4c3e0e366b5c2d6086d6be5db1e8c33fd84e9295a5551f176d4acaa271dc46573d549884cdf8c9ea7204c38e4af4430a98dc6c9c24fedd8d3df6e7ec1d7b8a1e97e35d32cdea8cb1e710cda8157372315636623b56305f901db8c3a464274a779fc85d19f67c376e459d0e95d7e49620bbe9136ab128a610bfc6decbc554c1145aff99625022ebd0b19025bf721e8c0c9e68cf9961a91be313b41baccb01c885afeae4dc6e2bfb19ee784da4ae0732ab7efc4156a8b2c097f7f263827a8540b8a383e4fb"}) ioctl$TIOCSIG(r0, 0x40045436, 0x19) 22:07:20 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc082, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x1006) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc082, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x1006) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000040)) (async) 22:07:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x209) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1f, 0xe, 0xe, &(0x7f0000000080)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000900)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x20, 0x8, 0x123, &(0x7f00000004c0)="99e91c5ab4763559141167629c8f2abfe9caa781fc475fba6a438695430d4b9565fa8568caa1416e46d418bcf8c4422aecb19705ddbaa8f6772ef6c262b3314ae94463e8e3a4d947925459b0e61f131733a1f3299d43072602b68e8e3818707f534a344379d69bfd81a2a60bf4b417d24380741ab8528e22dbec22ff736c44eeca6d3809a8c37925e72b8a360978b9fe1668af3d6787b6a79f02b4a75527c9889d656324444e54496d4043f18b0e222826d5f1f1a79022eb1f88ef8c2b83357b9c36e2dfe003af78459f03233d339addb4bfc631b3dc43f4fe4c5812040bbba844ea33e4d7a93539e4f6c444cdadcd26ed975bd03c4dc4cffd9bbef07b7c0c39b2acb790b30995182ce7ac3a4b69d8bb29e75dc553212b2b7aaf75867e94ee8cf1c935df8be85339e09a0eb144950d07732ec8599522dbb8e5da467badb92c72c66a765e3820b3c41a843292711fa3b7fbdf6754861859f49c3d6565a6811ae904a40374340c11213a577c1b0f32c26c80932f3ac950430cb60cedd8a8289f544130482fa184db830dec39912a25e87beda1c3c910e7f59a02bcf1c59c46787e8372063cfd5e18ebe26e328df299792fadd6499a73f93c7249d1919779c9fa62575db14a3c74e6e27e81e6a7807a3c81be7e6738505ad667f0e55392ad79ecc05746169bdb0a359ce32fe66693f91ec76875c257db2ba5c4e69149a6867241c24ade228d1095228067ffe8b7f755ee8b88aa43b64e4c6b7015a4ec80b494de7bdf9875f124e5649055f2b6408366f280284888dca18478ba237f712b816ca80df94edb2085faa4d51e55dbc0475fd120403837686eaa62624808be2f04b0723ca017391ccbbc716d0504a002f4d14003b4ac26ffbc94c77b65c0ecc0285ac8286706fbfadc0abf89e0cec9e59cea538b05d83525ea4a7a53b204ae9b455c6fd1c05189a76de92e87ee5c6dd8e4af5dab1f779ca47f04851ba270fd6ba56219cd79e11ac3710ff6be14f0dd864b909b3ee3cb77699cca96c1cea0805913c56907eef6870ffcc980be937a1c5d0b6678022806837d2291b2d49f98d63c8e5c81bb2ccc9a06a5307412052a83d5b5a99a68973bd0ca1e33804208568b133b2dd18ac16b8a23b9fdc4b00f19c829b44f71923aa6ca29ce67d962ddae04ba4c3e0e366b5c2d6086d6be5db1e8c33fd84e9295a5551f176d4acaa271dc46573d549884cdf8c9ea7204c38e4af4430a98dc6c9c24fedd8d3df6e7ec1d7b8a1e97e35d32cdea8cb1e710cda8157372315636623b56305f901db8c3a464274a779fc85d19f67c376e459d0e95d7e49620bbe9136ab128a610bfc6decbc554c1145aff99625022ebd0b19025bf721e8c0c9e68cf9961a91be313b41baccb01c885afeae4dc6e2bfb19ee784da4ae0732ab7efc4156a8b2c097f7f263827a8540b8a383e4fb"}) ioctl$TIOCSIG(r0, 0x40045436, 0x19) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x209) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1f, 0xe, 0xe, &(0x7f0000000080)}) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000900)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x20, 0x8, 0x123, &(0x7f00000004c0)="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"}) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x19) (async) 22:07:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:20 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x22) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0xd, 0x16, 0xb8, &(0x7f0000000040)="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"}) 22:07:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x209) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1f, 0xe, 0xe, &(0x7f0000000080)}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000900)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x20, 0x8, 0x123, &(0x7f00000004c0)="99e91c5ab4763559141167629c8f2abfe9caa781fc475fba6a438695430d4b9565fa8568caa1416e46d418bcf8c4422aecb19705ddbaa8f6772ef6c262b3314ae94463e8e3a4d947925459b0e61f131733a1f3299d43072602b68e8e3818707f534a344379d69bfd81a2a60bf4b417d24380741ab8528e22dbec22ff736c44eeca6d3809a8c37925e72b8a360978b9fe1668af3d6787b6a79f02b4a75527c9889d656324444e54496d4043f18b0e222826d5f1f1a79022eb1f88ef8c2b83357b9c36e2dfe003af78459f03233d339addb4bfc631b3dc43f4fe4c5812040bbba844ea33e4d7a93539e4f6c444cdadcd26ed975bd03c4dc4cffd9bbef07b7c0c39b2acb790b30995182ce7ac3a4b69d8bb29e75dc553212b2b7aaf75867e94ee8cf1c935df8be85339e09a0eb144950d07732ec8599522dbb8e5da467badb92c72c66a765e3820b3c41a843292711fa3b7fbdf6754861859f49c3d6565a6811ae904a40374340c11213a577c1b0f32c26c80932f3ac950430cb60cedd8a8289f544130482fa184db830dec39912a25e87beda1c3c910e7f59a02bcf1c59c46787e8372063cfd5e18ebe26e328df299792fadd6499a73f93c7249d1919779c9fa62575db14a3c74e6e27e81e6a7807a3c81be7e6738505ad667f0e55392ad79ecc05746169bdb0a359ce32fe66693f91ec76875c257db2ba5c4e69149a6867241c24ade228d1095228067ffe8b7f755ee8b88aa43b64e4c6b7015a4ec80b494de7bdf9875f124e5649055f2b6408366f280284888dca18478ba237f712b816ca80df94edb2085faa4d51e55dbc0475fd120403837686eaa62624808be2f04b0723ca017391ccbbc716d0504a002f4d14003b4ac26ffbc94c77b65c0ecc0285ac8286706fbfadc0abf89e0cec9e59cea538b05d83525ea4a7a53b204ae9b455c6fd1c05189a76de92e87ee5c6dd8e4af5dab1f779ca47f04851ba270fd6ba56219cd79e11ac3710ff6be14f0dd864b909b3ee3cb77699cca96c1cea0805913c56907eef6870ffcc980be937a1c5d0b6678022806837d2291b2d49f98d63c8e5c81bb2ccc9a06a5307412052a83d5b5a99a68973bd0ca1e33804208568b133b2dd18ac16b8a23b9fdc4b00f19c829b44f71923aa6ca29ce67d962ddae04ba4c3e0e366b5c2d6086d6be5db1e8c33fd84e9295a5551f176d4acaa271dc46573d549884cdf8c9ea7204c38e4af4430a98dc6c9c24fedd8d3df6e7ec1d7b8a1e97e35d32cdea8cb1e710cda8157372315636623b56305f901db8c3a464274a779fc85d19f67c376e459d0e95d7e49620bbe9136ab128a610bfc6decbc554c1145aff99625022ebd0b19025bf721e8c0c9e68cf9961a91be313b41baccb01c885afeae4dc6e2bfb19ee784da4ae0732ab7efc4156a8b2c097f7f263827a8540b8a383e4fb"}) ioctl$TIOCSIG(r0, 0x40045436, 0x19) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x209) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1f, 0xe, 0xe, &(0x7f0000000080)}) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000900)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f00000008c0)={0x2, 0x0, 0x20, 0x8, 0x123, &(0x7f00000004c0)="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"}) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x19) (async) 22:07:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x17}}, 0x4048100) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 22:07:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) 22:07:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x22) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0xd, 0x16, 0xb8, &(0x7f0000000040)="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"}) 22:07:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000003c0)={0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) ioctl$FIONREAD(r0, 0x80047437, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 22:07:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x17}}, 0x4048100) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x17}}, 0x4048100) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) 22:07:20 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) 22:07:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x22) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0xd, 0x16, 0xb8, &(0x7f0000000040)="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"}) 22:07:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000003c0)={0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 22:07:21 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 22:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x17}}, 0x4048100) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 22:07:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x20) 22:07:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000003c0)={0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) ioctl$FIONREAD(r0, 0x80047437, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000003c0)={0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) 22:07:21 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 22:07:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x20) (async) 22:07:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02010000020000000000050000000000"], 0x10}}, 0x0) 22:07:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x3, 0x7, 0x200}) 22:07:21 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 22:07:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)=0x20) (async) 22:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02010000020000000000050000000000"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02010000020000000000050000000000"], 0x10}}, 0x0) (async) 22:07:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x3, 0x7, 0x200}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x3, 0x7, 0x200}) (async) 22:07:21 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x8b, 0x9, 0x1, 0x1000, 0xe, "49a9bf8c4646f120"}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = getpid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r3) 22:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02010000020000000000050000000000"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02010000020000000000050000000000"], 0x10}}, 0x0) (async) 22:07:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x3, 0x7, 0x200}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x3, 0x7, 0x200}) (async) 22:07:21 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:21 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 22:07:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x8b, 0x9, 0x1, 0x1000, 0xe, "49a9bf8c4646f120"}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = getpid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x8b, 0x9, 0x1, 0x1000, 0xe, "49a9bf8c4646f120"}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) getpid() (async) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r3) (async) 22:07:21 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 22:07:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 22:07:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="51f2867a6f51bf65beaa690af60006ea3e75fc0e691bb9c6bcf6a434ac490a2d9e3d6d") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r2, 0x80047437, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) r4 = getpid() sched_rr_get_interval(r4, &(0x7f0000000000)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) 22:07:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x8b, 0x9, 0x1, 0x1000, 0xe, "49a9bf8c4646f120"}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = getpid() ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x8b, 0x9, 0x1, 0x1000, 0xe, "49a9bf8c4646f120"}) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) getpid() (async) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000000c0)=r3) (async) 22:07:21 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="51f2867a6f51bf65beaa690af60006ea3e75fc0e691bb9c6bcf6a434ac490a2d9e3d6d") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) (async) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) (async) r4 = getpid() sched_rr_get_interval(r4, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) 22:07:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 22:07:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000400)={0x2, {0x2, 0x1, 0x7fff, 0xfff8, 0xff, 0x2}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000003c0)={0x209a, 0x5, 0x5, 0x400, 0x17, "a2cfb3041ea70476"}) 22:07:21 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 22:07:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 22:07:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_pts(r0, 0x400000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2b2100, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x5, 0xff, 0x7d, 0x7, "9b73b8000036006c"}) 22:07:22 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) 22:07:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="51f2867a6f51bf65beaa690af60006ea3e75fc0e691bb9c6bcf6a434ac490a2d9e3d6d") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r2, 0x80047437, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) r4 = getpid() sched_rr_get_interval(r4, &(0x7f0000000000)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000180)="51f2867a6f51bf65beaa690af60006ea3e75fc0e691bb9c6bcf6a434ac490a2d9e3d6d") (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$FIONREAD(r2, 0x80047437, 0x0) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) (async) getpid() (async) sched_rr_get_interval(r4, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) (async) 22:07:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) (async) 22:07:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_pts(r0, 0x400000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2b2100, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x5, 0xff, 0x7d, 0x7, "9b73b8000036006c"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x400000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2b2100, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x5, 0xff, 0x7d, 0x7, "9b73b8000036006c"}) (async) 22:07:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) (async) 22:07:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 22:07:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) syz_open_pts(r0, 0x400000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2b2100, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x5, 0xff, 0x7d, 0x7, "9b73b8000036006c"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x400000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2b2100, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x1, 0x5, 0xff, 0x7d, 0x7, "9b73b8000036006c"}) (async) 22:07:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:07:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x700000000000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x10}}, 0x0) 22:07:22 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 22:07:22 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 22:07:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22:07:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async, rerun: 32) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:07:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x8000000) 22:07:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x700000000000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x10}}, 0x0) 22:07:22 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 22:07:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:07:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4103) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x2, 0x1, 0x7, 0x1000, 0x14, &(0x7f0000000280)="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"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSIG(r2, 0x40045436, 0x8) socketpair(0x6, 0x1, 0x81, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRK(r1, 0x5409, 0x1f) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x64) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000200)) ioctl$KDSKBLED(r1, 0x4b65, 0x5) ioctl$FIONREAD(r0, 0x80047437, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4008018) read$snapshot(r4, &(0x7f0000000780)=""/143, 0x8f) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) 22:07:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x8000000) 22:07:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x700000000000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x10}}, 0x0) 22:07:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async, rerun: 64) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r1, 0x80047437, 0x0) 22:07:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:07:22 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$snapshot(r1, &(0x7f0000000140)=""/174, 0xae) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x3, 0xe5}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000200)) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xe0b, 0x8, 0x9}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@initdev, @local}, &(0x7f0000000240)=0xc) 22:07:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="5867b51089e38238f1acc104d41ace9a63db86f492715ecaf00e6c482d87e40dc3c766b64dc682dcfee7a700"/55) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:22 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:07:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x8000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x8000000) (async) 22:07:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:22 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 22:07:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) 22:07:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/80) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x800008) ioctl$TIOCGPTPEER(r0, 0x5441, 0x63ee) 22:07:23 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) 22:07:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x800008) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x63ee) 22:07:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/80) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000003c0)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x90101, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @local, 0x1f}, {0xa, 0x4e24, 0xff, @private1, 0x3}, r6, 0x1}}, 0x48) write$snapshot(r3, &(0x7f0000000200)="32b5c75544a6ae38ba594a553230059c1a6175f288ff87edc118aaf66762af89544d4aa19622cf6bd9671e3a9c3679c2745a0b0ed5c208991ea55a6d3ceb886e3bb797a5ff05394091e2", 0x4a) ioctl$FIONREAD(r2, 0x80047437, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r7, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETVESABLANK(r7, 0x541c, &(0x7f0000000440)) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 22:07:23 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 22:07:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1002) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x800008) ioctl$TIOCGPTPEER(r0, 0x5441, 0x63ee) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)=0x800008) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x63ee) (async) 22:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fffbdf2509000000da"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$key(0xf, 0x3, 0x2) 22:07:23 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$FIONREAD(r1, 0x541b, 0x0) 22:07:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1002) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000000)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) 22:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fffbdf2509000000da"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fffbdf2509000000da"], 0x58}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) 22:07:23 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x18) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1724.212266] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 22:07:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1002) (async) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x8) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000140)) 22:07:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000000)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) getpid() (async) sched_rr_get_interval(r2, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) (async) [ 1724.364454] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 22:07:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="2aee35ab700430605433935345eca28c78944e4c1078eef945ff1d88956f7dceb98bc0efba541f447c097bc06a43345bcdaf37d8700e1c0dcff052c330502de9575a25cc75d7d9f833c8ff9be964dc1b1c64d04471352aec832aee694fff00dfc8bc996bc16671aaff99bdf858e5d3a5242b3e178f7f99189e9d8bbf965f4e978bee26") 22:07:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1724.408360] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 22:07:23 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x8) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000140)) 22:07:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fffbdf2509000000da"], 0x58}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socket$key(0xf, 0x3, 0x2) 22:07:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000000)) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) 22:07:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r4, &(0x7f0000000200)=""/141, 0x8d) read$snapshot(r2, &(0x7f0000000140)=""/157, 0x9d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSBRK(r1, 0x5409, 0x0) 22:07:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:23 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:23 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x8) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000140)) 22:07:23 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x4a45) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7c, 0xb7}) 22:07:23 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1, 0x4, 0xe8, &(0x7f0000000040)}) 22:07:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x8) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) 22:07:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) socket$key(0xf, 0x3, 0x2) 22:07:24 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1, 0x4, 0xe8, &(0x7f0000000040)}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1, 0x4, 0xe8, &(0x7f0000000040)}) (async) 22:07:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x4a45) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7c, 0xb7}) 22:07:24 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x8) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) 22:07:24 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x4a45) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7c, 0xb7}) 22:07:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1, 0x4, 0xe8, &(0x7f0000000040)}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1, 0x4, 0xe8, &(0x7f0000000040)}) (async) 22:07:24 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) socket$key(0xf, 0x3, 0x2) 22:07:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x8) 22:07:24 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xc0d, 0x25, 0x4, 0x726, 0x4}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) ioctl$FIONREAD(r2, 0x80047437, 0x0) 22:07:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) socket$key(0xf, 0x3, 0x2) 22:07:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0xfffffffffffffdb1) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x1, {0xa, 0x4e20, 0x1ff, @rand_addr=' \x01\x00', 0xff}, r3}}, 0x38) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) 22:07:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe9c}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48804) 22:07:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe9c}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48804) 22:07:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:25 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe9c}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48804) 22:07:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:25 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 4: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/174) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:25 executing program 5: socketpair(0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x4, 0x1, 0x15ed, 0x20, 0x1b, "7b725b81f2eae53e"}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:25 executing program 4: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:25 executing program 5: socketpair(0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x4, 0x1, 0x15ed, 0x20, 0x1b, "7b725b81f2eae53e"}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) 22:07:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:25 executing program 4: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:25 executing program 5: socketpair(0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x4, 0x1, 0x15ed, 0x20, 0x1b, "7b725b81f2eae53e"}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x4, 0x1, 0x15ed, 0x20, 0x1b, "7b725b81f2eae53e"}) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) (async) 22:07:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:25 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x4, 0x6, 0x0, 0xfb3, 0x10, "672c6f16ef72b567"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) 22:07:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) socket$key(0xf, 0x3, 0x2) 22:07:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x4, 0x6, 0x0, 0xfb3, 0x10, "672c6f16ef72b567"}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) 22:07:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x4, 0x6, 0x0, 0xfb3, 0x10, "672c6f16ef72b567"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000080)) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x4, 0x6, 0x0, 0xfb3, 0x10, "672c6f16ef72b567"}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000040)) (async) 22:07:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 22:07:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x80047437, 0x0) 22:07:26 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:26 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 0: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x232, 0x414e, 0x8}) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4e88c0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000140)=@bcast) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) syz_open_pts(r1, 0x2080) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) 22:07:26 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x7fff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x88c0, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f00000000c0)=0x8) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x20, 0x0, "c9d565ea9d2ed30130f36e56a399577e61c6e4b9fc4f6f5a72f46bf0d34aaa1d6f51350a9bd754ff80066e8b897d7d1194cc3e9e8ada9f7f411769b60f3c2b5d08bf95ba48d8a933787ffd136d5d105acb8d94a03e44513580a24ba9ac07ac5778b6818ba7b90f075bbf4b0591d07cc009b09c9585fd3a301120545f0cd4aacf58cefaa880b6761cae064151ba6a47706712bd08171daa22f8b75b1b759afb822fcb33f2a780bb07074305b83d83fe94"}) 22:07:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:26 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:27 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:27 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:27 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:27 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:27 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:27 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:27 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:27 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:27 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:27 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:27 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:28 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, 0x0) 22:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, 0x0) 22:07:28 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:28 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, 0x0) 22:07:28 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x7621, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:28 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0xc9, 0x4, 0x10, "f622da19f244dd34"}) 22:07:28 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:28 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x10, "f622da19f244dd34"}) 22:07:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:28 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:29 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10, "f622da19f244dd34"}) 22:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:29 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "f622da19f244dd34"}) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) 22:07:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 1731.190243] ieee802154 phy1 wpan1: encryption failed: -22 22:07:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:31 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:31 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:31 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:31 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 22:07:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:32 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:32 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="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") r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r5, 0xc0100) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 22:07:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r1) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r6, &(0x7f0000000ac0)=""/146, 0x92) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xd90, 0x5, 0x50, 0xc3f56c34700afa76, 0xffffffffffffffff, 0x330c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0xd}, 0x48) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r8, &(0x7f0000000ac0)=""/146, 0x92) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r9, &(0x7f0000000ac0)=""/146, 0x92) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x81, 0x6, 0x1000, 0x1040, 0x1, 0x80000000, '\x00', r3, r8, 0x1, 0x2, 0x4, 0xd}, 0x48) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r11, &(0x7f0000000ac0)=""/146, 0x92) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x2, 0x0, 0x7, 0x2, 0xfffffffffffffff8, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x6, 0x1, 0x0, r10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x1, 0x7, 0xa, 0xc, 0xfffffffffffffffc}], &(0x7f0000000140)='syzkaller\x00', 0xaa, 0xe2, &(0x7f0000000180)=""/226, 0x41000, 0xbbc77f8300dbf635, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x617f, 0x3}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r2, 0xffffffffffffffff, r10, r6, 0x1, r7, r11, r9]}, 0x80) 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:32 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="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") r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r5, 0xc0100) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 22:07:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000000)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r1) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x3) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r6, &(0x7f0000000ac0)=""/146, 0x92) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xd90, 0x5, 0x50, 0xc3f56c34700afa76, 0xffffffffffffffff, 0x330c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0xd}, 0x48) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r8, &(0x7f0000000ac0)=""/146, 0x92) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r9, &(0x7f0000000ac0)=""/146, 0x92) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x81, 0x6, 0x1000, 0x1040, 0x1, 0x80000000, '\x00', r3, r8, 0x1, 0x2, 0x4, 0xd}, 0x48) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r11, &(0x7f0000000ac0)=""/146, 0x92) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x2, 0x0, 0x7, 0x2, 0xfffffffffffffff8, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x6, 0x1, 0x0, r10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x1, 0x7, 0xa, 0xc, 0xfffffffffffffffc}], &(0x7f0000000140)='syzkaller\x00', 0xaa, 0xe2, &(0x7f0000000180)=""/226, 0x41000, 0xbbc77f8300dbf635, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x617f, 0x3}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r2, 0xffffffffffffffff, r10, r6, 0x1, r7, r11, r9]}, 0x80) 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:32 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="371096d68489a55429def31496a35a9b81e402408565b3813a0d12be28c5fb67b1fb8b724a7c9c00270a28254013e0ae93882b27bbaa392e583014c2f37da8befbc4bda0bda74ea19e6e1ed213d3a51337d8d29f5726842b8c83002b95edee129bec366068c6171befb39010f19f4a1f545ae58e9b3bdcd5c1ed1da3370cf4db9abe1c55455a758eb892ad34233945bc25f6b17c2483d33ed3133ded0efaba3a132b0ad54e0deb9309cba932b467647f93642f4a66928bc70185fdb0ffde9ec595ad8f31c193aaebbf813535fc6c322d0e6aebe8842fb4639a541c650667b19c15085eee19cb76334fa9314f98118f2670ec0817ab7cf58e296314b2df1d88cdf91edf11540e7b4993ebc332a797e69094d87b584d491e7e6036cb2f7408019159b181e28a2c85e9e817d5ee5bbb02eac08ff52492685e867c606511356d68268687a18f0c638ee628233c5e9bd028bfdf690d126f1b0015f8368a741d0d98c14e79be79e8e1fd55b0bbc8749c70bb3781b52f22916a5fd51ecfbc57c16bccf3a876ca06e7ea467b4978ca51187f89c95249784ebccce748aff454203e8001b9929239884ee705d85daf0de4d930efb941cf958abdc5a191196a06c592aff6bee7bdf25fda948b826ab665e7bb7387a8a8662fd1b990ee383308ab4e3b0a070caea5c1ada94926d46f50c0fda5a5910c3191abebf724120a0fae2e447761a31406fbfbcd4b38af04435cbfe5c61e5557d00b74236a8de886209b7d72d765576f6118febeb488e75801d2d3c241c0bf332efff50d459893a8360b8331bfafb38d03a6c6607acf3b84aa9881f9395f8e246c3de7f87c3562baed9697165da5f760cf753f919c157029f4ec4b211877a91aa550b944de9b623862c27af03997d86c330d27799e2e6b86df46f4fc6aa11a607cd49d85b021189fab5d3bbecfc03e858e0fe936f50a6e85b7cdc767f3e4933991653291aed313925b5edaa2d1c8438aa57830fe50d4e19145aa7bf864dccf4a19cc4b8e9bb76a4c7087599df3af4f2166c4bb742c2f1ea6cbe13ccf8881c62d026021e5307d87fae7ad3dcff860dfa4383b66f9f9e3b71cd6b9e0e3acdce0377936466160d6ffb089410dbfc365e4ea05603c36b61578a70756d07adf099366da4d0083ee69ec82ac1e38d929f25dd43c8cee0ed8bbcce351685a1c434ed523790bbd72dc6f5d65e8bf4b6116c22d87424b4e3b06f87ff5a5b1c93ead43368b384ace8ddbba93d060c01bc029190903cb2733447064844a4f38b0d5ac3c8298fb2931b9e1fdb4e8e74557296ad3c8a0e81d63aae83e0741c2e8bcd68ff8801dee9c225952f62067bc4241e4758ba5e2b250de1a72ac29c34d24d376138c00c540d59ac268b0a9ff6001013c6431cf78c0e3d23378e133b3c53ad9711d7d79a16bdf1277411378cd9b20017a4f8a3a59bf3ce870cd3556e5a9f5911700e8192074cec524bf9b75d186dc7e7293a29bc7f46b9621f6eb596967ef28c8334b0e8c513431f5c6a44dacafb2a50b84e616410b9bfaaacc153d5bd26c1cdd7fbaff8e65e778e533ebc6db917fadd27ee662dc1f75d908aa8c74a1c2a8a412806c19fd93b76eb9c9ef7ea0902323a1a405b398a436098215c31394a334825d80e84d3702c13578dd030cba55d36a6f845fca853fc289ac881d815e80683e9189f9f734decf16e0e04bf8f5d859ff197c86584f932e2dbe6ec31f14540863595c1ea64b326c94bcb5d4e48c85c7150d0eebf834d2674e38f0d437894555fe6cde7e924c4c5e6882549180de1100f9a8325b0207b055160881b0982f9b6288f45fe3c4ccbef2cd9743e0c8b243849862df4372bf98a4cc16f8a02cba7b02d5e34e62edb49340f932d86038c9f1c08c1c78826d75500ca95d25e44b188dec812d8c4a1418a12c802a28530f2508103c153e5e5f38cacce171c9ea079c94716359ae5f1ddc1365d63adfaa3dfee3cf67687864571e5ed0ed25ce429785f6619d02aa376b8de5a5baf8ec0146bfb3db0dab50debd89c3f1d00d34a9e65d22b0f0aebe59834391fc35661ce682691dcbc95554b6813a7f2d0b1dd95f409ea6a198ad5db212909961bb0979019380d570c88d726621717365b10520391f33c4369cc1499084f45d03213035a4bc1ece9d7f693fa61f7a69b00950c15cd243c7cdd688a0b278f1a3d3ae68fea1185572dd47fd8004c5761d9c0c40446ca315d616fbabefe008b394336635c6a2a08dbc7d3f39141edaae97667372140b13fd04ca32a999f124d8546383eb709db2e7388e67d1b8c7a3d455899c4e607e38b91a9a273cfd577fd30690f0a00c3ebc8e7913e3f6fc49261248aa86cd263813a4ee0b989ab486f0a85390c5b3c91bee47389b6d21e9c1787629df50860d295d182ccfb88d664f6d23703cd603f8fb8477ddd0826e952136a3b86b05e0f390884511c2de4ac26db415f1eee6d50c58ffd1c1ca423cb2104ab6c7a3e4d1cd8d9636b457cd4976c09d2433a8de8e082df474062fa621211315c4b7e7b0aa4db6033d860d2f086336dbfd4a8091e99cba51aa9dc6e6530ff8020c1fd1911d2b1eb66c5dd537a41b2650f8e3b158c21428f929ddeb230997e814db1ae26b5709fd2ce6e2bbe91db7a76a270cffe9c80395ea25fdfd7264059cf9d52d6b6c059c09cc4d49c082c6b57c9361c62221e02e28307c3eb2fd078070161878d2a6e94139f838904ef63159e9fdba5241dc5f2d5e0204647a28111d21fc41b4fdedea9815347b34bac9f96cfdd91aa3aa0978da1d4e662868e4f7ebc58737f052ada0ee009819e8402931cdb3fd49088fa6e48a308f6b14792b56ae198c13e5df13b517a4def6335fcded741d9e2f5c819bd0d2134c4912c2031d273349611503b51237ef8a1725f6dd647ba457a7c0ec4ecc90d0202109506383bfe4705a2b569d6b49dd58f84c3573430621899b6edbdb0b1ebf9e8cdc2663aa0a3c98c35d94b679fc335cbe5f79ad6d9a1bdd71df3b13a0fcc51bfb83622428c3d722d4d71650aa24d6d8b2f2d48613167e8e9da8dbd36ba7b45f3f2b91bd03cb7bf3b0fdd363654dd13e0792395dece78823aa4bdf086c8be1c7b4b5cf870b5033979521c6b4f06b415c07ce9624c10341f950a538e95e884afd6c0a9b8c81c010d22fa440f86af713d6680050a5e14e6b998dc8e0f2badeaa8e112ccc37267af4c545f38f5ccd1d9ed47d76ad14dfdc9ec2e0a3aa93dcd005eb1791a080b6aeed94c80fac07a8fa302b7919cb4f696d9456ba9dec06ae0dbc6668e7a8657285b1471012c6cd415d191532e4e79a25f174f96248122baac349ae1ac28f71265450d8503f52aca898b5f652e3aa6fd96aa760cb6c3b23bfa7f0a863ed059ace80b0df94598fe66057ff03a208b36b875f9ed56c546900ec6476817579d827950c198aad6e3af8ff895e20bc146235d9291c73d6625695778e46fb1bf3b643f4d5fc643d8db636116ab8c8aa6f9eed3fb2ba5ba4950a8eb8865566590541fb2a5efc1626bb113d85685598462d8d6242fe54729852c5202692288f151bfd572551658312606eca34f4d6e21f6023fe901078ae1887cfee8a2b20a239f89ebe3100d8e077dd91952bf205811fd15a99edb4880737721924e2c6489654e2fec23b2ff4cc460c4b8cf4aea5d64fa911d9322583fa50a0b9ab5871ec8429ab103d493f7d88de415bc7424ea23fe2798f7ce644f38034d2da237fbbe5ff0815e6c7970db30976ce224e5aae3208ce5acb6a1673d857a081a75b763077210cf36b362a6ccff900c3f2d449c9bd6ecdaaec1c2db795b4f9884a4517bf28eafde3780c3f15c1e0d06b19d091abea045a94a023dd10b26e4379a15732d785b34c0c94c6b116d48f32bbe5b5b38e5e08592e8b5412a8ec9abe028f7de539c794c3d8eb902ebdf1046f6bb52b6ef8d02f224e78ea3fae7510cff268db5616bb8a97efe82e4ec3a70ed0de3cc059cb882771d01d60c172fa2985afc7ef1e76ef718bbb5edc5afd86b7ab776a831bf59db197a487df10a6c9829427ff056a9f3db7031ce0375326ebc8eddffc86c9f6456afbd7bff01ae8015d2b89d53898483ab9d182fa462bd3d8bb90e0da831dafe75e18d36450342c636da662d4d05c17159af076bf3defc7bbe86a674fe8b98f45a905f38e91279f66324212ee9c989378d7315c1c13707e8fe6f44b35f2decdb57bcda7535176e7768c4c0c8ed87782544ef2602f6ea48df047c7d26001ae32da28bbff771c2550eb40e39cbbd2192910d481325621612b339a09f8fb8f06435a84a9260dc4b94a30c867c6012db9b5f3eb22d8926dbf3b12b29e85297a460ede65fa36dc27e0091e4ca3da6df446af32e22cb2cb47bfbe8820e597ed4c58730f369f191ea0daae6f1f09719891164385b2cc94fcad31752adbe303f234fa41825c17261a7047ccd50350bdce87b2e9987f629a95f1f0f3c8783bbc1f002b9dc95a8b2c1ce8fbb3da102da905bc4a66463c4116959f8029f8aa7af2eec97f02ed6443014ff16373c10b882312a759a5146f551530d7d0a52745739eda31eb3ad35a51c0d9035764ffc4b8cf6fb4aec4ccbe90b46fea5e29f0ec5a6e5be987a98b23a8bdca45e27de591c96e2ed6322553e71b2735a288f549ec04d571059cd798dd7f6e4e84d8f6e02c23533e124e2e2d586721324dd97b2b0134809793d8a4b94e80c3fc6f7d72a9562c3fdc5c52ccc12a718efd8d3eb4985107888f2183a5b78c10b807deefac5847237514d2861f07d30e8aa94c5dccb3df8bbe9c0689e773a701457e3c5ba685f9ce4cdf484ab5cb1a4cff546934efdaa5e28c7e27533a11094f7ffa5763eb1c4e2802ac3d771b0f5516e90877e5826b8687982d21b2e718dde1c9f6a64649ab8dd27af75969bcb9f1812339a3184e3cafeb85aadb9d9f0f0f4714054abfd20353cf48d6727925f3a4dd4b0704d62f1f90a492528d639523e592f405a317c297974e2f3fb7009c437b9968fbba0d9d664ff81857e76678cf59daa9b95d41ef278cfff272099814aec9399c81bf0368ddd47858451ddf04aafb00bb73a8344f07770dc2590e162df2acafb031a1fd6eb971288c408b8e2df47d29e9aa22de2af57ceec35ba94b937938be66da69092246613f1e041b15e1a4b0f91c4f63978e951aa68cec55bb7dd3968093b23d776e59237ff7c62557291bc65028273572523c7d805081c5d6851c3ebc1bc6ba15ec0b02e6164f04b08652af6e348ae32655a175f7202943653799e571dd76281c70258f91c4aef19aeb19d1179b93816fee528c6db90c5cc5351f72a9dc06f63e884b3e0fef490210437f7ed0f93302b8b13f4d39a94f9df3aad264fc289485cc106d12893df9beb9ee01877de95a5e2dcea8ef730abfb18d7be8246e0b818a0269359b2ad9245d446c6fff8a129fd924022c96a3e70cf4e1acc23aaf6fa5d2d2253c62e668ace0b7a1509b6979f6131ee2ff83e0576373b1e21410a55f8b33182716f9525fc8f780e370f9a70debb360ea4e6ab47e31534a433a0cd12b6928dec28fc99b3d1fc4fa75cb54597d0330b021c486635c5319f219548d544db666e90ba444061071046a8e122df7c4f9b6666d332f78fbe8d524b85a60391880e8b0d9342d349326b32bd8df9b2af019d1cfa16af3db710cf9a7660665d16c04c7714a933519ece06096d73f6ef1a43469e15bd67441bb2dc01d1f989668d97019852437c7e666cb01840c87b32df3cedbcf789d3f8c8196627b73df82aab78c72ad697e9374") r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r5, 0xc0100) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 22:07:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0xc000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:32 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:32 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="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") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r4, 0xc0100) 22:07:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x10, 0x20, 0x13a, &(0x7f0000000080)}) ioctl$TCSBRK(r1, 0x5409, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfffffffe) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000005c0)) ioctl$FIONREAD(r0, 0x541b, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000500)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{}, {}, {}, {}]}) 22:07:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:32 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="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") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 22:07:32 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="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") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) 22:07:32 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="371096d68489a55429def31496a35a9b81e402408565b3813a0d12be28c5fb67b1fb8b724a7c9c00270a28254013e0ae93882b27bbaa392e583014c2f37da8befbc4bda0bda74ea19e6e1ed213d3a51337d8d29f5726842b8c83002b95edee129bec366068c6171befb39010f19f4a1f545ae58e9b3bdcd5c1ed1da3370cf4db9abe1c55455a758eb892ad34233945bc25f6b17c2483d33ed3133ded0efaba3a132b0ad54e0deb9309cba932b467647f93642f4a66928bc70185fdb0ffde9ec595ad8f31c193aaebbf813535fc6c322d0e6aebe8842fb4639a541c650667b19c15085eee19cb76334fa9314f98118f2670ec0817ab7cf58e296314b2df1d88cdf91edf11540e7b4993ebc332a797e69094d87b584d491e7e6036cb2f7408019159b181e28a2c85e9e817d5ee5bbb02eac08ff52492685e867c606511356d68268687a18f0c638ee628233c5e9bd028bfdf690d126f1b0015f8368a741d0d98c14e79be79e8e1fd55b0bbc8749c70bb3781b52f22916a5fd51ecfbc57c16bccf3a876ca06e7ea467b4978ca51187f89c95249784ebccce748aff454203e8001b9929239884ee705d85daf0de4d930efb941cf958abdc5a191196a06c592aff6bee7bdf25fda948b826ab665e7bb7387a8a8662fd1b990ee383308ab4e3b0a070caea5c1ada94926d46f50c0fda5a5910c3191abebf724120a0fae2e447761a31406fbfbcd4b38af04435cbfe5c61e5557d00b74236a8de886209b7d72d765576f6118febeb488e75801d2d3c241c0bf332efff50d459893a8360b8331bfafb38d03a6c6607acf3b84aa9881f9395f8e246c3de7f87c3562baed9697165da5f760cf753f919c157029f4ec4b211877a91aa550b944de9b623862c27af03997d86c330d27799e2e6b86df46f4fc6aa11a607cd49d85b021189fab5d3bbecfc03e858e0fe936f50a6e85b7cdc767f3e4933991653291aed313925b5edaa2d1c8438aa57830fe50d4e19145aa7bf864dccf4a19cc4b8e9bb76a4c7087599df3af4f2166c4bb742c2f1ea6cbe13ccf8881c62d026021e5307d87fae7ad3dcff860dfa4383b66f9f9e3b71cd6b9e0e3acdce0377936466160d6ffb089410dbfc365e4ea05603c36b61578a70756d07adf099366da4d0083ee69ec82ac1e38d929f25dd43c8cee0ed8bbcce351685a1c434ed523790bbd72dc6f5d65e8bf4b6116c22d87424b4e3b06f87ff5a5b1c93ead43368b384ace8ddbba93d060c01bc029190903cb2733447064844a4f38b0d5ac3c8298fb2931b9e1fdb4e8e74557296ad3c8a0e81d63aae83e0741c2e8bcd68ff8801dee9c225952f62067bc4241e4758ba5e2b250de1a72ac29c34d24d376138c00c540d59ac268b0a9ff6001013c6431cf78c0e3d23378e133b3c53ad9711d7d79a16bdf1277411378cd9b20017a4f8a3a59bf3ce870cd3556e5a9f5911700e8192074cec524bf9b75d186dc7e7293a29bc7f46b9621f6eb596967ef28c8334b0e8c513431f5c6a44dacafb2a50b84e616410b9bfaaacc153d5bd26c1cdd7fbaff8e65e778e533ebc6db917fadd27ee662dc1f75d908aa8c74a1c2a8a412806c19fd93b76eb9c9ef7ea0902323a1a405b398a436098215c31394a334825d80e84d3702c13578dd030cba55d36a6f845fca853fc289ac881d815e80683e9189f9f734decf16e0e04bf8f5d859ff197c86584f932e2dbe6ec31f14540863595c1ea64b326c94bcb5d4e48c85c7150d0eebf834d2674e38f0d437894555fe6cde7e924c4c5e6882549180de1100f9a8325b0207b055160881b0982f9b6288f45fe3c4ccbef2cd9743e0c8b243849862df4372bf98a4cc16f8a02cba7b02d5e34e62edb49340f932d86038c9f1c08c1c78826d75500ca95d25e44b188dec812d8c4a1418a12c802a28530f2508103c153e5e5f38cacce171c9ea079c94716359ae5f1ddc1365d63adfaa3dfee3cf67687864571e5ed0ed25ce429785f6619d02aa376b8de5a5baf8ec0146bfb3db0dab50debd89c3f1d00d34a9e65d22b0f0aebe59834391fc35661ce682691dcbc95554b6813a7f2d0b1dd95f409ea6a198ad5db212909961bb0979019380d570c88d726621717365b10520391f33c4369cc1499084f45d03213035a4bc1ece9d7f693fa61f7a69b00950c15cd243c7cdd688a0b278f1a3d3ae68fea1185572dd47fd8004c5761d9c0c40446ca315d616fbabefe008b394336635c6a2a08dbc7d3f39141edaae97667372140b13fd04ca32a999f124d8546383eb709db2e7388e67d1b8c7a3d455899c4e607e38b91a9a273cfd577fd30690f0a00c3ebc8e7913e3f6fc49261248aa86cd263813a4ee0b989ab486f0a85390c5b3c91bee47389b6d21e9c1787629df50860d295d182ccfb88d664f6d23703cd603f8fb8477ddd0826e952136a3b86b05e0f390884511c2de4ac26db415f1eee6d50c58ffd1c1ca423cb2104ab6c7a3e4d1cd8d9636b457cd4976c09d2433a8de8e082df474062fa621211315c4b7e7b0aa4db6033d860d2f086336dbfd4a8091e99cba51aa9dc6e6530ff8020c1fd1911d2b1eb66c5dd537a41b2650f8e3b158c21428f929ddeb230997e814db1ae26b5709fd2ce6e2bbe91db7a76a270cffe9c80395ea25fdfd7264059cf9d52d6b6c059c09cc4d49c082c6b57c9361c62221e02e28307c3eb2fd078070161878d2a6e94139f838904ef63159e9fdba5241dc5f2d5e0204647a28111d21fc41b4fdedea9815347b34bac9f96cfdd91aa3aa0978da1d4e662868e4f7ebc58737f052ada0ee009819e8402931cdb3fd49088fa6e48a308f6b14792b56ae198c13e5df13b517a4def6335fcded741d9e2f5c819bd0d2134c4912c2031d273349611503b51237ef8a1725f6dd647ba457a7c0ec4ecc90d0202109506383bfe4705a2b569d6b49dd58f84c3573430621899b6edbdb0b1ebf9e8cdc2663aa0a3c98c35d94b679fc335cbe5f79ad6d9a1bdd71df3b13a0fcc51bfb83622428c3d722d4d71650aa24d6d8b2f2d48613167e8e9da8dbd36ba7b45f3f2b91bd03cb7bf3b0fdd363654dd13e0792395dece78823aa4bdf086c8be1c7b4b5cf870b5033979521c6b4f06b415c07ce9624c10341f950a538e95e884afd6c0a9b8c81c010d22fa440f86af713d6680050a5e14e6b998dc8e0f2badeaa8e112ccc37267af4c545f38f5ccd1d9ed47d76ad14dfdc9ec2e0a3aa93dcd005eb1791a080b6aeed94c80fac07a8fa302b7919cb4f696d9456ba9dec06ae0dbc6668e7a8657285b1471012c6cd415d191532e4e79a25f174f96248122baac349ae1ac28f71265450d8503f52aca898b5f652e3aa6fd96aa760cb6c3b23bfa7f0a863ed059ace80b0df94598fe66057ff03a208b36b875f9ed56c546900ec6476817579d827950c198aad6e3af8ff895e20bc146235d9291c73d6625695778e46fb1bf3b643f4d5fc643d8db636116ab8c8aa6f9eed3fb2ba5ba4950a8eb8865566590541fb2a5efc1626bb113d85685598462d8d6242fe54729852c5202692288f151bfd572551658312606eca34f4d6e21f6023fe901078ae1887cfee8a2b20a239f89ebe3100d8e077dd91952bf205811fd15a99edb4880737721924e2c6489654e2fec23b2ff4cc460c4b8cf4aea5d64fa911d9322583fa50a0b9ab5871ec8429ab103d493f7d88de415bc7424ea23fe2798f7ce644f38034d2da237fbbe5ff0815e6c7970db30976ce224e5aae3208ce5acb6a1673d857a081a75b763077210cf36b362a6ccff900c3f2d449c9bd6ecdaaec1c2db795b4f9884a4517bf28eafde3780c3f15c1e0d06b19d091abea045a94a023dd10b26e4379a15732d785b34c0c94c6b116d48f32bbe5b5b38e5e08592e8b5412a8ec9abe028f7de539c794c3d8eb902ebdf1046f6bb52b6ef8d02f224e78ea3fae7510cff268db5616bb8a97efe82e4ec3a70ed0de3cc059cb882771d01d60c172fa2985afc7ef1e76ef718bbb5edc5afd86b7ab776a831bf59db197a487df10a6c9829427ff056a9f3db7031ce0375326ebc8eddffc86c9f6456afbd7bff01ae8015d2b89d53898483ab9d182fa462bd3d8bb90e0da831dafe75e18d36450342c636da662d4d05c17159af076bf3defc7bbe86a674fe8b98f45a905f38e91279f66324212ee9c989378d7315c1c13707e8fe6f44b35f2decdb57bcda7535176e7768c4c0c8ed87782544ef2602f6ea48df047c7d26001ae32da28bbff771c2550eb40e39cbbd2192910d481325621612b339a09f8fb8f06435a84a9260dc4b94a30c867c6012db9b5f3eb22d8926dbf3b12b29e85297a460ede65fa36dc27e0091e4ca3da6df446af32e22cb2cb47bfbe8820e597ed4c58730f369f191ea0daae6f1f09719891164385b2cc94fcad31752adbe303f234fa41825c17261a7047ccd50350bdce87b2e9987f629a95f1f0f3c8783bbc1f002b9dc95a8b2c1ce8fbb3da102da905bc4a66463c4116959f8029f8aa7af2eec97f02ed6443014ff16373c10b882312a759a5146f551530d7d0a52745739eda31eb3ad35a51c0d9035764ffc4b8cf6fb4aec4ccbe90b46fea5e29f0ec5a6e5be987a98b23a8bdca45e27de591c96e2ed6322553e71b2735a288f549ec04d571059cd798dd7f6e4e84d8f6e02c23533e124e2e2d586721324dd97b2b0134809793d8a4b94e80c3fc6f7d72a9562c3fdc5c52ccc12a718efd8d3eb4985107888f2183a5b78c10b807deefac5847237514d2861f07d30e8aa94c5dccb3df8bbe9c0689e773a701457e3c5ba685f9ce4cdf484ab5cb1a4cff546934efdaa5e28c7e27533a11094f7ffa5763eb1c4e2802ac3d771b0f5516e90877e5826b8687982d21b2e718dde1c9f6a64649ab8dd27af75969bcb9f1812339a3184e3cafeb85aadb9d9f0f0f4714054abfd20353cf48d6727925f3a4dd4b0704d62f1f90a492528d639523e592f405a317c297974e2f3fb7009c437b9968fbba0d9d664ff81857e76678cf59daa9b95d41ef278cfff272099814aec9399c81bf0368ddd47858451ddf04aafb00bb73a8344f07770dc2590e162df2acafb031a1fd6eb971288c408b8e2df47d29e9aa22de2af57ceec35ba94b937938be66da69092246613f1e041b15e1a4b0f91c4f63978e951aa68cec55bb7dd3968093b23d776e59237ff7c62557291bc65028273572523c7d805081c5d6851c3ebc1bc6ba15ec0b02e6164f04b08652af6e348ae32655a175f7202943653799e571dd76281c70258f91c4aef19aeb19d1179b93816fee528c6db90c5cc5351f72a9dc06f63e884b3e0fef490210437f7ed0f93302b8b13f4d39a94f9df3aad264fc289485cc106d12893df9beb9ee01877de95a5e2dcea8ef730abfb18d7be8246e0b818a0269359b2ad9245d446c6fff8a129fd924022c96a3e70cf4e1acc23aaf6fa5d2d2253c62e668ace0b7a1509b6979f6131ee2ff83e0576373b1e21410a55f8b33182716f9525fc8f780e370f9a70debb360ea4e6ab47e31534a433a0cd12b6928dec28fc99b3d1fc4fa75cb54597d0330b021c486635c5319f219548d544db666e90ba444061071046a8e122df7c4f9b6666d332f78fbe8d524b85a60391880e8b0d9342d349326b32bd8df9b2af019d1cfa16af3db710cf9a7660665d16c04c7714a933519ece06096d73f6ef1a43469e15bd67441bb2dc01d1f989668d97019852437c7e666cb01840c87b32df3cedbcf789d3f8c8196627b73df82aab78c72ad697e9374") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 22:07:32 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="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") 22:07:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:32 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:33 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000500)="371096d68489a55429def31496a35a9b81e402408565b3813a0d12be28c5fb67b1fb8b724a7c9c00270a28254013e0ae93882b27bbaa392e583014c2f37da8befbc4bda0bda74ea19e6e1ed213d3a51337d8d29f5726842b8c83002b95edee129bec366068c6171befb39010f19f4a1f545ae58e9b3bdcd5c1ed1da3370cf4db9abe1c55455a758eb892ad34233945bc25f6b17c2483d33ed3133ded0efaba3a132b0ad54e0deb9309cba932b467647f93642f4a66928bc70185fdb0ffde9ec595ad8f31c193aaebbf813535fc6c322d0e6aebe8842fb4639a541c650667b19c15085eee19cb76334fa9314f98118f2670ec0817ab7cf58e296314b2df1d88cdf91edf11540e7b4993ebc332a797e69094d87b584d491e7e6036cb2f7408019159b181e28a2c85e9e817d5ee5bbb02eac08ff52492685e867c606511356d68268687a18f0c638ee628233c5e9bd028bfdf690d126f1b0015f8368a741d0d98c14e79be79e8e1fd55b0bbc8749c70bb3781b52f22916a5fd51ecfbc57c16bccf3a876ca06e7ea467b4978ca51187f89c95249784ebccce748aff454203e8001b9929239884ee705d85daf0de4d930efb941cf958abdc5a191196a06c592aff6bee7bdf25fda948b826ab665e7bb7387a8a8662fd1b990ee383308ab4e3b0a070caea5c1ada94926d46f50c0fda5a5910c3191abebf724120a0fae2e447761a31406fbfbcd4b38af04435cbfe5c61e5557d00b74236a8de886209b7d72d765576f6118febeb488e75801d2d3c241c0bf332efff50d459893a8360b8331bfafb38d03a6c6607acf3b84aa9881f9395f8e246c3de7f87c3562baed9697165da5f760cf753f919c157029f4ec4b211877a91aa550b944de9b623862c27af03997d86c330d27799e2e6b86df46f4fc6aa11a607cd49d85b021189fab5d3bbecfc03e858e0fe936f50a6e85b7cdc767f3e4933991653291aed313925b5edaa2d1c8438aa57830fe50d4e19145aa7bf864dccf4a19cc4b8e9bb76a4c7087599df3af4f2166c4bb742c2f1ea6cbe13ccf8881c62d026021e5307d87fae7ad3dcff860dfa4383b66f9f9e3b71cd6b9e0e3acdce0377936466160d6ffb089410dbfc365e4ea05603c36b61578a70756d07adf099366da4d0083ee69ec82ac1e38d929f25dd43c8cee0ed8bbcce351685a1c434ed523790bbd72dc6f5d65e8bf4b6116c22d87424b4e3b06f87ff5a5b1c93ead43368b384ace8ddbba93d060c01bc029190903cb2733447064844a4f38b0d5ac3c8298fb2931b9e1fdb4e8e74557296ad3c8a0e81d63aae83e0741c2e8bcd68ff8801dee9c225952f62067bc4241e4758ba5e2b250de1a72ac29c34d24d376138c00c540d59ac268b0a9ff6001013c6431cf78c0e3d23378e133b3c53ad9711d7d79a16bdf1277411378cd9b20017a4f8a3a59bf3ce870cd3556e5a9f5911700e8192074cec524bf9b75d186dc7e7293a29bc7f46b9621f6eb596967ef28c8334b0e8c513431f5c6a44dacafb2a50b84e616410b9bfaaacc153d5bd26c1cdd7fbaff8e65e778e533ebc6db917fadd27ee662dc1f75d908aa8c74a1c2a8a412806c19fd93b76eb9c9ef7ea0902323a1a405b398a436098215c31394a334825d80e84d3702c13578dd030cba55d36a6f845fca853fc289ac881d815e80683e9189f9f734decf16e0e04bf8f5d859ff197c86584f932e2dbe6ec31f14540863595c1ea64b326c94bcb5d4e48c85c7150d0eebf834d2674e38f0d437894555fe6cde7e924c4c5e6882549180de1100f9a8325b0207b055160881b0982f9b6288f45fe3c4ccbef2cd9743e0c8b243849862df4372bf98a4cc16f8a02cba7b02d5e34e62edb49340f932d86038c9f1c08c1c78826d75500ca95d25e44b188dec812d8c4a1418a12c802a28530f2508103c153e5e5f38cacce171c9ea079c94716359ae5f1ddc1365d63adfaa3dfee3cf67687864571e5ed0ed25ce429785f6619d02aa376b8de5a5baf8ec0146bfb3db0dab50debd89c3f1d00d34a9e65d22b0f0aebe59834391fc35661ce682691dcbc95554b6813a7f2d0b1dd95f409ea6a198ad5db212909961bb0979019380d570c88d726621717365b10520391f33c4369cc1499084f45d03213035a4bc1ece9d7f693fa61f7a69b00950c15cd243c7cdd688a0b278f1a3d3ae68fea1185572dd47fd8004c5761d9c0c40446ca315d616fbabefe008b394336635c6a2a08dbc7d3f39141edaae97667372140b13fd04ca32a999f124d8546383eb709db2e7388e67d1b8c7a3d455899c4e607e38b91a9a273cfd577fd30690f0a00c3ebc8e7913e3f6fc49261248aa86cd263813a4ee0b989ab486f0a85390c5b3c91bee47389b6d21e9c1787629df50860d295d182ccfb88d664f6d23703cd603f8fb8477ddd0826e952136a3b86b05e0f390884511c2de4ac26db415f1eee6d50c58ffd1c1ca423cb2104ab6c7a3e4d1cd8d9636b457cd4976c09d2433a8de8e082df474062fa621211315c4b7e7b0aa4db6033d860d2f086336dbfd4a8091e99cba51aa9dc6e6530ff8020c1fd1911d2b1eb66c5dd537a41b2650f8e3b158c21428f929ddeb230997e814db1ae26b5709fd2ce6e2bbe91db7a76a270cffe9c80395ea25fdfd7264059cf9d52d6b6c059c09cc4d49c082c6b57c9361c62221e02e28307c3eb2fd078070161878d2a6e94139f838904ef63159e9fdba5241dc5f2d5e0204647a28111d21fc41b4fdedea9815347b34bac9f96cfdd91aa3aa0978da1d4e662868e4f7ebc58737f052ada0ee009819e8402931cdb3fd49088fa6e48a308f6b14792b56ae198c13e5df13b517a4def6335fcded741d9e2f5c819bd0d2134c4912c2031d273349611503b51237ef8a1725f6dd647ba457a7c0ec4ecc90d0202109506383bfe4705a2b569d6b49dd58f84c3573430621899b6edbdb0b1ebf9e8cdc2663aa0a3c98c35d94b679fc335cbe5f79ad6d9a1bdd71df3b13a0fcc51bfb83622428c3d722d4d71650aa24d6d8b2f2d48613167e8e9da8dbd36ba7b45f3f2b91bd03cb7bf3b0fdd363654dd13e0792395dece78823aa4bdf086c8be1c7b4b5cf870b5033979521c6b4f06b415c07ce9624c10341f950a538e95e884afd6c0a9b8c81c010d22fa440f86af713d6680050a5e14e6b998dc8e0f2badeaa8e112ccc37267af4c545f38f5ccd1d9ed47d76ad14dfdc9ec2e0a3aa93dcd005eb1791a080b6aeed94c80fac07a8fa302b7919cb4f696d9456ba9dec06ae0dbc6668e7a8657285b1471012c6cd415d191532e4e79a25f174f96248122baac349ae1ac28f71265450d8503f52aca898b5f652e3aa6fd96aa760cb6c3b23bfa7f0a863ed059ace80b0df94598fe66057ff03a208b36b875f9ed56c546900ec6476817579d827950c198aad6e3af8ff895e20bc146235d9291c73d6625695778e46fb1bf3b643f4d5fc643d8db636116ab8c8aa6f9eed3fb2ba5ba4950a8eb8865566590541fb2a5efc1626bb113d85685598462d8d6242fe54729852c5202692288f151bfd572551658312606eca34f4d6e21f6023fe901078ae1887cfee8a2b20a239f89ebe3100d8e077dd91952bf205811fd15a99edb4880737721924e2c6489654e2fec23b2ff4cc460c4b8cf4aea5d64fa911d9322583fa50a0b9ab5871ec8429ab103d493f7d88de415bc7424ea23fe2798f7ce644f38034d2da237fbbe5ff0815e6c7970db30976ce224e5aae3208ce5acb6a1673d857a081a75b763077210cf36b362a6ccff900c3f2d449c9bd6ecdaaec1c2db795b4f9884a4517bf28eafde3780c3f15c1e0d06b19d091abea045a94a023dd10b26e4379a15732d785b34c0c94c6b116d48f32bbe5b5b38e5e08592e8b5412a8ec9abe028f7de539c794c3d8eb902ebdf1046f6bb52b6ef8d02f224e78ea3fae7510cff268db5616bb8a97efe82e4ec3a70ed0de3cc059cb882771d01d60c172fa2985afc7ef1e76ef718bbb5edc5afd86b7ab776a831bf59db197a487df10a6c9829427ff056a9f3db7031ce0375326ebc8eddffc86c9f6456afbd7bff01ae8015d2b89d53898483ab9d182fa462bd3d8bb90e0da831dafe75e18d36450342c636da662d4d05c17159af076bf3defc7bbe86a674fe8b98f45a905f38e91279f66324212ee9c989378d7315c1c13707e8fe6f44b35f2decdb57bcda7535176e7768c4c0c8ed87782544ef2602f6ea48df047c7d26001ae32da28bbff771c2550eb40e39cbbd2192910d481325621612b339a09f8fb8f06435a84a9260dc4b94a30c867c6012db9b5f3eb22d8926dbf3b12b29e85297a460ede65fa36dc27e0091e4ca3da6df446af32e22cb2cb47bfbe8820e597ed4c58730f369f191ea0daae6f1f09719891164385b2cc94fcad31752adbe303f234fa41825c17261a7047ccd50350bdce87b2e9987f629a95f1f0f3c8783bbc1f002b9dc95a8b2c1ce8fbb3da102da905bc4a66463c4116959f8029f8aa7af2eec97f02ed6443014ff16373c10b882312a759a5146f551530d7d0a52745739eda31eb3ad35a51c0d9035764ffc4b8cf6fb4aec4ccbe90b46fea5e29f0ec5a6e5be987a98b23a8bdca45e27de591c96e2ed6322553e71b2735a288f549ec04d571059cd798dd7f6e4e84d8f6e02c23533e124e2e2d586721324dd97b2b0134809793d8a4b94e80c3fc6f7d72a9562c3fdc5c52ccc12a718efd8d3eb4985107888f2183a5b78c10b807deefac5847237514d2861f07d30e8aa94c5dccb3df8bbe9c0689e773a701457e3c5ba685f9ce4cdf484ab5cb1a4cff546934efdaa5e28c7e27533a11094f7ffa5763eb1c4e2802ac3d771b0f5516e90877e5826b8687982d21b2e718dde1c9f6a64649ab8dd27af75969bcb9f1812339a3184e3cafeb85aadb9d9f0f0f4714054abfd20353cf48d6727925f3a4dd4b0704d62f1f90a492528d639523e592f405a317c297974e2f3fb7009c437b9968fbba0d9d664ff81857e76678cf59daa9b95d41ef278cfff272099814aec9399c81bf0368ddd47858451ddf04aafb00bb73a8344f07770dc2590e162df2acafb031a1fd6eb971288c408b8e2df47d29e9aa22de2af57ceec35ba94b937938be66da69092246613f1e041b15e1a4b0f91c4f63978e951aa68cec55bb7dd3968093b23d776e59237ff7c62557291bc65028273572523c7d805081c5d6851c3ebc1bc6ba15ec0b02e6164f04b08652af6e348ae32655a175f7202943653799e571dd76281c70258f91c4aef19aeb19d1179b93816fee528c6db90c5cc5351f72a9dc06f63e884b3e0fef490210437f7ed0f93302b8b13f4d39a94f9df3aad264fc289485cc106d12893df9beb9ee01877de95a5e2dcea8ef730abfb18d7be8246e0b818a0269359b2ad9245d446c6fff8a129fd924022c96a3e70cf4e1acc23aaf6fa5d2d2253c62e668ace0b7a1509b6979f6131ee2ff83e0576373b1e21410a55f8b33182716f9525fc8f780e370f9a70debb360ea4e6ab47e31534a433a0cd12b6928dec28fc99b3d1fc4fa75cb54597d0330b021c486635c5319f219548d544db666e90ba444061071046a8e122df7c4f9b6666d332f78fbe8d524b85a60391880e8b0d9342d349326b32bd8df9b2af019d1cfa16af3db710cf9a7660665d16c04c7714a933519ece06096d73f6ef1a43469e15bd67441bb2dc01d1f989668d97019852437c7e666cb01840c87b32df3cedbcf789d3f8c8196627b73df82aab78c72ad697e9374") openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x254302, 0x0) 22:07:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) 22:07:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:33 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e21, @remote}}}, 0xa0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x5e2) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000000)={0x66, 0x1f, 0x80}) ioctl$FIONREAD(r4, 0x541b, 0x0) 22:07:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) [ 1733.977795] sp1: Synchronizing with TNC 22:07:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) 22:07:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0xff, 0x9, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 22:07:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) ioctl$TIOCSETD(r3, 0x4020940d, &(0x7f0000000080)=0x80000004) 22:07:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x96ef) ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000040)=0x3) r2 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) 22:07:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 22:07:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1734.476555] mkiss: ax0: crc mode is auto. 22:07:33 executing program 4: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @multicast2}, &(0x7f0000000240)=0xfffffffffffffd85) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) write$snapshot(r1, &(0x7f00000001c0)="ae0f39d274898f973f3147226f4ba68ca89b69bf9f3efbe959bf5e539cd257dc991102a09eefa10711cf0515806486f8a8a70dbe5db87d570bd55aa4a4d29b479df4e68782ddafa9f6543224ade072e47f471b", 0x53) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x6, 0x40, 0x2, 0x82, 0x19, "d815f70045b6ac3e"}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x3ff, 0x3}) 22:07:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) ioctl$FIONREAD(r0, 0x80047437, 0x0) 22:07:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, 0x0}, 0x0) 22:07:33 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8a00108}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) read$snapshot(r6, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000480)={0x308a99a3, 0x8}) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x66}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x40) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)) 22:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:34 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8a00108}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) read$snapshot(r6, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000480)={0x308a99a3, 0x8}) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x66}, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x40) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)) 22:07:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) 22:07:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1b) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180)) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000000)=0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x2000000, 0x10, r2, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)=0x11) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4}, 0xc) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x133001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x880, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x1) 22:07:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x15f7, 0x67f3, 0x0, 0x3}}) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22:07:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x11, 0x0, 0x0, 0x2}, 0x17}, 0x1, 0x0, 0x100000000000000}, 0x0) 22:07:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x5420, 0x0) 22:07:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:34 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:35 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:35 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (fail_nth: 1) 22:07:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:35 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 3: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) [ 1736.004169] FAULT_INJECTION: forcing a failure. [ 1736.004169] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.073254] CPU: 0 PID: 5253 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1736.081178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1736.090892] Call Trace: [ 1736.093506] dump_stack+0x1fc/0x2ef [ 1736.097156] should_fail.cold+0xa/0xf [ 1736.100976] ? setup_fault_attr+0x200/0x200 [ 1736.105311] ? lock_acquire+0x170/0x3c0 [ 1736.109307] __should_failslab+0x115/0x180 [ 1736.113650] should_failslab+0x5/0x10 [ 1736.117637] kmem_cache_alloc_node+0x245/0x3b0 [ 1736.122240] __alloc_skb+0x71/0x560 [ 1736.125886] pfkey_sendmsg+0x146/0x7d0 [ 1736.129790] ? pfkey_process+0x790/0x790 [ 1736.133880] sock_sendmsg+0xc3/0x120 [ 1736.137610] ___sys_sendmsg+0x7bb/0x8e0 [ 1736.141603] ? check_preemption_disabled+0x41/0x280 [ 1736.146639] ? copy_msghdr_from_user+0x440/0x440 [ 1736.151418] ? __fget+0x32f/0x510 [ 1736.154893] ? lock_downgrade+0x720/0x720 [ 1736.159057] ? check_preemption_disabled+0x41/0x280 [ 1736.164088] ? check_preemption_disabled+0x41/0x280 [ 1736.169119] ? __fget+0x356/0x510 22:07:35 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 3: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) [ 1736.172584] ? do_dup2+0x450/0x450 [ 1736.176134] ? lock_downgrade+0x720/0x720 [ 1736.180293] ? vfs_write+0x3d7/0x540 [ 1736.184022] ? __fdget+0x1d0/0x230 [ 1736.187577] __x64_sys_sendmsg+0x132/0x220 [ 1736.191824] ? __sys_sendmsg+0x1b0/0x1b0 [ 1736.195891] ? vfs_write+0x393/0x540 [ 1736.199623] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1736.205090] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1736.210124] ? do_syscall_64+0x21/0x620 [ 1736.214113] do_syscall_64+0xf9/0x620 [ 1736.217927] entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:07:35 executing program 3: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) [ 1736.223128] RIP: 0033:0x7f386d2990f9 [ 1736.226851] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1736.245762] RSP: 002b:00007f386b80b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1736.253492] RAX: ffffffffffffffda RBX: 00007f386d3b8f80 RCX: 00007f386d2990f9 [ 1736.262948] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 22:07:35 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) [ 1736.270233] RBP: 00007f386b80b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.277517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.284800] R13: 00007fff1a33b43f R14: 00007f386b80b300 R15: 0000000000022000 22:07:35 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (fail_nth: 2) 22:07:35 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) 22:07:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:35 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047456, 0x0) [ 1736.659011] FAULT_INJECTION: forcing a failure. [ 1736.659011] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.709809] CPU: 0 PID: 5321 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1736.717648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1736.727008] Call Trace: [ 1736.729616] dump_stack+0x1fc/0x2ef [ 1736.733264] should_fail.cold+0xa/0xf [ 1736.737082] ? setup_fault_attr+0x200/0x200 [ 1736.741420] ? lock_acquire+0x170/0x3c0 [ 1736.745413] __should_failslab+0x115/0x180 [ 1736.749662] should_failslab+0x5/0x10 [ 1736.753479] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1736.760511] __kmalloc_node_track_caller+0x38/0x70 [ 1736.765461] __alloc_skb+0xae/0x560 [ 1736.769124] pfkey_sendmsg+0x146/0x7d0 [ 1736.773033] ? pfkey_process+0x790/0x790 [ 1736.777133] sock_sendmsg+0xc3/0x120 [ 1736.780865] ___sys_sendmsg+0x7bb/0x8e0 [ 1736.784852] ? check_preemption_disabled+0x41/0x280 [ 1736.789878] ? copy_msghdr_from_user+0x440/0x440 [ 1736.794645] ? __fget+0x32f/0x510 [ 1736.798109] ? lock_downgrade+0x720/0x720 [ 1736.802268] ? check_preemption_disabled+0x41/0x280 [ 1736.807298] ? check_preemption_disabled+0x41/0x280 [ 1736.812327] ? __fget+0x356/0x510 [ 1736.815794] ? do_dup2+0x450/0x450 [ 1736.819343] ? lock_downgrade+0x720/0x720 [ 1736.823503] ? vfs_write+0x3d7/0x540 [ 1736.827233] ? __fdget+0x1d0/0x230 [ 1736.830794] __x64_sys_sendmsg+0x132/0x220 [ 1736.835038] ? __sys_sendmsg+0x1b0/0x1b0 [ 1736.839108] ? vfs_write+0x393/0x540 [ 1736.842845] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1736.848219] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1736.853255] ? do_syscall_64+0x21/0x620 [ 1736.857243] do_syscall_64+0xf9/0x620 [ 1736.861061] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1736.866259] RIP: 0033:0x7f386d2990f9 [ 1736.869982] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1736.888889] RSP: 002b:00007f386b80b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1736.896611] RAX: ffffffffffffffda RBX: 00007f386d3b8f80 RCX: 00007f386d2990f9 22:07:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047456, 0x0) [ 1736.903892] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1736.911171] RBP: 00007f386b80b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.918447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.925723] R13: 00007fff1a33b43f R14: 00007f386b80b300 R15: 0000000000022000 22:07:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (fail_nth: 3) 22:07:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:36 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:36 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 22:07:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x80047456, 0x0) [ 1737.107892] FAULT_INJECTION: forcing a failure. [ 1737.107892] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.190074] CPU: 1 PID: 5354 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1737.197906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1737.207270] Call Trace: [ 1737.209870] dump_stack+0x1fc/0x2ef [ 1737.213517] should_fail.cold+0xa/0xf [ 1737.217334] ? setup_fault_attr+0x200/0x200 [ 1737.221668] ? lock_acquire+0x170/0x3c0 [ 1737.225662] __should_failslab+0x115/0x180 [ 1737.229912] should_failslab+0x5/0x10 [ 1737.233722] kmem_cache_alloc+0x277/0x370 [ 1737.237885] skb_clone+0x151/0x3d0 [ 1737.241441] pfkey_process+0xbc/0x790 [ 1737.245249] ? pfkey_send_notify+0xfc0/0xfc0 [ 1737.249664] ? __mutex_lock+0x368/0x1190 [ 1737.253735] ? __might_fault+0x11f/0x1d0 [ 1737.257810] ? pfkey_sendmsg+0x3ff/0x7d0 [ 1737.261879] ? mutex_trylock+0x1a0/0x1a0 [ 1737.265948] ? __might_fault+0xef/0x1d0 [ 1737.269928] ? iov_iter_advance+0x210/0xdb0 [ 1737.274298] ? copyin+0xa4/0xf0 [ 1737.277601] ? _copy_from_iter_full+0x229/0x7c0 [ 1737.282287] ? __phys_addr_symbol+0x2c/0x70 [ 1737.286621] ? __check_object_size+0x17b/0x3e0 [ 1737.291221] pfkey_sendmsg+0x40d/0x7d0 [ 1737.295123] ? pfkey_process+0x790/0x790 [ 1737.299195] sock_sendmsg+0xc3/0x120 [ 1737.302919] ___sys_sendmsg+0x7bb/0x8e0 [ 1737.306995] ? check_preemption_disabled+0x41/0x280 [ 1737.312019] ? copy_msghdr_from_user+0x440/0x440 [ 1737.316784] ? __fget+0x32f/0x510 [ 1737.320256] ? lock_downgrade+0x720/0x720 [ 1737.324413] ? check_preemption_disabled+0x41/0x280 [ 1737.329443] ? check_preemption_disabled+0x41/0x280 [ 1737.334476] ? __fget+0x356/0x510 [ 1737.337952] ? do_dup2+0x450/0x450 [ 1737.341590] ? lock_downgrade+0x720/0x720 [ 1737.345752] ? vfs_write+0x3d7/0x540 [ 1737.349486] ? __fdget+0x1d0/0x230 [ 1737.353063] __x64_sys_sendmsg+0x132/0x220 [ 1737.357316] ? __sys_sendmsg+0x1b0/0x1b0 [ 1737.361389] ? vfs_write+0x393/0x540 [ 1737.365126] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1737.370502] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1737.375558] ? do_syscall_64+0x21/0x620 [ 1737.379554] do_syscall_64+0xf9/0x620 [ 1737.383367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1737.388561] RIP: 0033:0x7f386d2990f9 [ 1737.392283] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1737.411281] RSP: 002b:00007f386b80b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.419011] RAX: ffffffffffffffda RBX: 00007f386d3b8f80 RCX: 00007f386d2990f9 [ 1737.426415] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1737.433703] RBP: 00007f386b80b1d0 R08: 0000000000000000 R09: 0000000000000000 22:07:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) [ 1737.440998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.448277] R13: 00007fff1a33b43f R14: 00007f386b80b300 R15: 0000000000022000 22:07:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (fail_nth: 4) 22:07:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:36 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 22:07:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:37 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:37 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 22:07:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) [ 1737.765126] FAULT_INJECTION: forcing a failure. [ 1737.765126] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.825006] CPU: 1 PID: 5412 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1737.832860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1737.842222] Call Trace: [ 1737.844829] dump_stack+0x1fc/0x2ef [ 1737.848524] should_fail.cold+0xa/0xf [ 1737.852373] ? setup_fault_attr+0x200/0x200 [ 1737.856711] ? lock_acquire+0x170/0x3c0 [ 1737.860708] __should_failslab+0x115/0x180 [ 1737.864959] should_failslab+0x5/0x10 [ 1737.868771] kmem_cache_alloc_trace+0x284/0x380 [ 1737.873454] __request_module+0x31e/0xb80 [ 1737.877632] ? mark_held_locks+0xf0/0xf0 [ 1737.881705] ? sock_sendmsg+0xc3/0x120 [ 1737.885603] ? ___sys_sendmsg+0x7bb/0x8e0 [ 1737.889763] ? crypto_alg_mod_lookup+0x24f/0x4d0 [ 1737.894538] ? free_modprobe_argv+0x90/0x90 [ 1737.898877] ? debug_check_no_obj_freed+0x201/0x490 [ 1737.903916] ? crypto_alg_lookup+0x70/0x120 [ 1737.908286] ? lock_downgrade+0x720/0x720 [ 1737.912445] ? lock_acquire+0x170/0x3c0 [ 1737.916431] ? crypto_alg_lookup+0x41/0x120 [ 1737.920767] ? __crypto_alg_lookup+0x26d/0x2d0 [ 1737.925366] crypto_alg_mod_lookup+0x24f/0x4d0 [ 1737.929960] crypto_has_alg+0x21/0x70 [ 1737.933774] xfrm_probe_algs+0x1f9/0x2e0 [ 1737.937851] pfkey_register+0xe9/0x950 [ 1737.941753] ? __pfkey_xfrm_state2msg+0x3740/0x3740 [ 1737.946787] pfkey_process+0x66d/0x790 [ 1737.950694] ? pfkey_send_notify+0xfc0/0xfc0 [ 1737.955109] ? __mutex_lock+0x368/0x1190 [ 1737.959197] ? _copy_from_iter_full+0x229/0x7c0 [ 1737.963894] ? __phys_addr_symbol+0x2c/0x70 [ 1737.968227] ? __check_object_size+0x17b/0x3e0 [ 1737.972832] pfkey_sendmsg+0x40d/0x7d0 [ 1737.976738] ? pfkey_process+0x790/0x790 [ 1737.980815] sock_sendmsg+0xc3/0x120 [ 1737.984541] ___sys_sendmsg+0x7bb/0x8e0 [ 1737.988532] ? check_preemption_disabled+0x41/0x280 [ 1737.993553] ? copy_msghdr_from_user+0x440/0x440 [ 1737.998319] ? __fget+0x32f/0x510 [ 1738.001791] ? lock_downgrade+0x720/0x720 [ 1738.005952] ? check_preemption_disabled+0x41/0x280 [ 1738.010985] ? check_preemption_disabled+0x41/0x280 [ 1738.016021] ? __fget+0x356/0x510 [ 1738.019498] ? do_dup2+0x450/0x450 [ 1738.023229] ? lock_downgrade+0x720/0x720 [ 1738.027404] ? vfs_write+0x3d7/0x540 [ 1738.031138] ? __fdget+0x1d0/0x230 [ 1738.034698] __x64_sys_sendmsg+0x132/0x220 [ 1738.038948] ? __sys_sendmsg+0x1b0/0x1b0 [ 1738.043024] ? vfs_write+0x393/0x540 [ 1738.046765] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1738.052155] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1738.057188] ? do_syscall_64+0x21/0x620 [ 1738.061180] do_syscall_64+0xf9/0x620 [ 1738.064999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.070195] RIP: 0033:0x7f386d2990f9 [ 1738.073920] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1738.092835] RSP: 002b:00007f386b80b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1738.100562] RAX: ffffffffffffffda RBX: 00007f386d3b8f80 RCX: 00007f386d2990f9 [ 1738.107999] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1738.115284] RBP: 00007f386b80b1d0 R08: 0000000000000000 R09: 0000000000000000 22:07:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) [ 1738.122565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.129849] R13: 00007fff1a33b43f R14: 00007f386b80b300 R15: 0000000000022000 22:07:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (fail_nth: 5) 22:07:37 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:37 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (fail_nth: 1) 22:07:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:37 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:07:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) [ 1738.635338] FAULT_INJECTION: forcing a failure. [ 1738.635338] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.649293] FAULT_INJECTION: forcing a failure. [ 1738.649293] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.703468] CPU: 1 PID: 5481 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1738.711310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1738.720804] Call Trace: [ 1738.723416] dump_stack+0x1fc/0x2ef [ 1738.727071] should_fail.cold+0xa/0xf [ 1738.730892] ? setup_fault_attr+0x200/0x200 [ 1738.735221] ? lock_acquire+0x170/0x3c0 [ 1738.739213] __should_failslab+0x115/0x180 [ 1738.743460] should_failslab+0x5/0x10 [ 1738.747287] __kmalloc_track_caller+0x2a6/0x3c0 [ 1738.751962] ? __request_module+0x33c/0xb80 [ 1738.756288] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1738.761314] kstrdup+0x36/0x70 [ 1738.764517] __request_module+0x33c/0xb80 [ 1738.768674] ? mark_held_locks+0xf0/0xf0 [ 1738.772750] ? sock_sendmsg+0xc3/0x120 [ 1738.776647] ? ___sys_sendmsg+0x7bb/0x8e0 [ 1738.780801] ? crypto_alg_mod_lookup+0x24f/0x4d0 [ 1738.785566] ? free_modprobe_argv+0x90/0x90 [ 1738.789904] ? debug_check_no_obj_freed+0x201/0x490 [ 1738.795028] ? crypto_alg_lookup+0x70/0x120 [ 1738.799362] ? lock_downgrade+0x720/0x720 [ 1738.803523] ? lock_acquire+0x170/0x3c0 [ 1738.807513] ? crypto_alg_lookup+0x41/0x120 [ 1738.811853] ? __crypto_alg_lookup+0x26d/0x2d0 [ 1738.816909] crypto_alg_mod_lookup+0x24f/0x4d0 [ 1738.821587] crypto_has_alg+0x21/0x70 [ 1738.825392] xfrm_probe_algs+0x1f9/0x2e0 [ 1738.829463] pfkey_register+0xe9/0x950 [ 1738.833367] ? __pfkey_xfrm_state2msg+0x3740/0x3740 [ 1738.838401] pfkey_process+0x66d/0x790 [ 1738.842302] ? pfkey_send_notify+0xfc0/0xfc0 [ 1738.846714] ? __mutex_lock+0x368/0x1190 [ 1738.850798] ? _copy_from_iter_full+0x229/0x7c0 [ 1738.855470] ? __phys_addr_symbol+0x2c/0x70 [ 1738.859803] ? __check_object_size+0x17b/0x3e0 [ 1738.864404] pfkey_sendmsg+0x40d/0x7d0 [ 1738.868304] ? pfkey_process+0x790/0x790 [ 1738.872385] sock_sendmsg+0xc3/0x120 [ 1738.876128] ___sys_sendmsg+0x7bb/0x8e0 [ 1738.880123] ? check_preemption_disabled+0x41/0x280 [ 1738.885146] ? copy_msghdr_from_user+0x440/0x440 [ 1738.889910] ? __fget+0x32f/0x510 [ 1738.893383] ? lock_downgrade+0x720/0x720 [ 1738.897534] ? check_preemption_disabled+0x41/0x280 [ 1738.902562] ? check_preemption_disabled+0x41/0x280 [ 1738.907595] ? __fget+0x356/0x510 [ 1738.911058] ? do_dup2+0x450/0x450 [ 1738.914603] ? lock_downgrade+0x720/0x720 [ 1738.918771] ? vfs_write+0x3d7/0x540 [ 1738.922496] ? __fdget+0x1d0/0x230 [ 1738.926059] __x64_sys_sendmsg+0x132/0x220 [ 1738.930302] ? __sys_sendmsg+0x1b0/0x1b0 [ 1738.934363] ? vfs_write+0x393/0x540 [ 1738.938092] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1738.943456] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1738.948475] ? do_syscall_64+0x21/0x620 [ 1738.952464] do_syscall_64+0xf9/0x620 [ 1738.956272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1738.961463] RIP: 0033:0x7f386d2990f9 [ 1738.965182] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1738.984111] RSP: 002b:00007f386b80b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1738.991942] RAX: ffffffffffffffda RBX: 00007f386d3b8f80 RCX: 00007f386d2990f9 22:07:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) [ 1738.999223] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1739.006502] RBP: 00007f386b80b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.013781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.021054] R13: 00007fff1a33b43f R14: 00007f386b80b300 R15: 0000000000022000 [ 1739.048981] CPU: 0 PID: 5476 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1739.056818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1739.066177] Call Trace: [ 1739.068775] dump_stack+0x1fc/0x2ef [ 1739.072422] should_fail.cold+0xa/0xf [ 1739.076242] ? setup_fault_attr+0x200/0x200 [ 1739.080578] ? lock_acquire+0x170/0x3c0 [ 1739.084569] __should_failslab+0x115/0x180 [ 1739.088811] should_failslab+0x5/0x10 [ 1739.092617] __kmalloc+0x2ab/0x3c0 [ 1739.096165] ? tty_write+0x59e/0x810 [ 1739.099893] ? tty_write+0x24e/0x810 [ 1739.103613] tty_write+0x59e/0x810 [ 1739.107159] ? n_tty_open+0x160/0x160 [ 1739.110974] __vfs_write+0xf7/0x770 [ 1739.114609] ? tty_compat_ioctl+0x270/0x270 [ 1739.118939] ? common_file_perm+0x4e5/0x850 [ 1739.123270] ? kernel_read+0x110/0x110 [ 1739.127171] ? apparmor_getprocattr+0x11e0/0x11e0 [ 1739.132040] ? security_file_permission+0x1c0/0x220 [ 1739.137071] vfs_write+0x1f3/0x540 [ 1739.140630] ksys_write+0x12b/0x2a0 [ 1739.144274] ? __ia32_sys_read+0xb0/0xb0 [ 1739.148350] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1739.153375] ? do_syscall_64+0x21/0x620 [ 1739.157363] do_syscall_64+0xf9/0x620 [ 1739.161178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.166374] RIP: 0033:0x7fefcb3050f9 [ 1739.170096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1739.189019] RSP: 002b:00007fefc9877168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1739.196737] RAX: ffffffffffffffda RBX: 00007fefcb424f80 RCX: 00007fefcb3050f9 [ 1739.204009] RDX: 000000000000000c RSI: 0000000020000000 RDI: 0000000000000003 [ 1739.211287] RBP: 00007fefc98771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.218567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.225839] R13: 00007ffcd7a2110f R14: 00007fefc9877300 R15: 0000000000022000 22:07:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (fail_nth: 6) 22:07:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:38 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:07:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x80047456, 0x0) 22:07:38 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (fail_nth: 2) 22:07:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (fail_nth: 1) 22:07:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) 22:07:38 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 1739.393512] FAULT_INJECTION: forcing a failure. [ 1739.393512] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.441015] FAULT_INJECTION: forcing a failure. [ 1739.441015] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.453728] CPU: 0 PID: 5521 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1739.461529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1739.470888] Call Trace: [ 1739.473490] dump_stack+0x1fc/0x2ef [ 1739.477164] should_fail.cold+0xa/0xf [ 1739.480980] ? setup_fault_attr+0x200/0x200 [ 1739.485313] ? mark_held_locks+0xf0/0xf0 [ 1739.489389] ? lock_acquire+0x170/0x3c0 [ 1739.493379] __should_failslab+0x115/0x180 [ 1739.497623] should_failslab+0x5/0x10 [ 1739.501432] __kmalloc+0x6d/0x3c0 [ 1739.504884] ? tty_buffer_alloc+0x23f/0x2a0 [ 1739.509203] ? __mutex_lock+0x368/0x1190 [ 1739.513274] tty_buffer_alloc+0x23f/0x2a0 [ 1739.517443] __tty_buffer_request_room+0x156/0x2a0 [ 1739.522385] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 1739.527930] ? do_raw_spin_lock+0xcb/0x220 [ 1739.532166] pty_write+0x126/0x1f0 [ 1739.535700] n_tty_write+0xa03/0xff0 [ 1739.539415] ? __ldsem_down_read_nested+0xd2/0x780 [ 1739.544372] ? n_tty_open+0x160/0x160 [ 1739.548333] ? do_wait_intr_irq+0x270/0x270 [ 1739.552669] ? __might_fault+0x192/0x1d0 [ 1739.556744] tty_write+0x496/0x810 [ 1739.560304] ? n_tty_open+0x160/0x160 [ 1739.564112] __vfs_write+0xf7/0x770 [ 1739.567734] ? tty_compat_ioctl+0x270/0x270 [ 1739.572062] ? common_file_perm+0x4e5/0x850 [ 1739.576390] ? kernel_read+0x110/0x110 [ 1739.580286] ? apparmor_getprocattr+0x11e0/0x11e0 [ 1739.585142] ? security_file_permission+0x1c0/0x220 [ 1739.590170] vfs_write+0x1f3/0x540 [ 1739.593727] ksys_write+0x12b/0x2a0 [ 1739.597372] ? __ia32_sys_read+0xb0/0xb0 [ 1739.601438] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1739.606456] ? do_syscall_64+0x21/0x620 [ 1739.610434] do_syscall_64+0xf9/0x620 [ 1739.614242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.619453] RIP: 0033:0x7fefcb3050f9 [ 1739.623184] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1739.642128] RSP: 002b:00007fefc9877168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1739.649850] RAX: ffffffffffffffda RBX: 00007fefcb424f80 RCX: 00007fefcb3050f9 [ 1739.657128] RDX: 000000000000000c RSI: 0000000020000000 RDI: 0000000000000003 [ 1739.664407] RBP: 00007fefc98771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.671770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.679046] R13: 00007ffcd7a2110f R14: 00007fefc9877300 R15: 0000000000022000 [ 1739.686330] CPU: 1 PID: 5516 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1739.686334] [ 1739.686343] ====================================================== [ 1739.686346] WARNING: possible circular locking dependency detected [ 1739.686349] 4.19.211-syzkaller #0 Not tainted [ 1739.686352] ------------------------------------------------------ [ 1739.686356] syz-executor.3/5521 is trying to acquire lock: [ 1739.686359] 00000000b377e817 (console_owner){-...}, at: console_unlock+0x3a9/0x1110 [ 1739.686370] [ 1739.686373] but task is already holding lock: [ 1739.686376] 00000000d3365462 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xf4/0x1f0 [ 1739.686387] [ 1739.686391] which lock already depends on the new lock. [ 1739.686393] [ 1739.686395] [ 1739.686399] the existing dependency chain (in reverse order) is: [ 1739.686401] [ 1739.686403] -> #2 (&(&port->lock)->rlock){-.-.}: [ 1739.686414] tty_port_tty_get+0x1d/0x80 [ 1739.686417] tty_port_default_wakeup+0x11/0x40 [ 1739.686420] serial8250_tx_chars+0x490/0xaf0 [ 1739.686424] serial8250_handle_irq.part.0+0x31f/0x3d0 [ 1739.686429] serial8250_default_handle_irq+0xae/0x220 [ 1739.686432] serial8250_interrupt+0x101/0x240 [ 1739.686436] __handle_irq_event_percpu+0x27e/0x8e0 [ 1739.686439] handle_irq_event+0x102/0x290 [ 1739.686442] handle_edge_irq+0x260/0xcf0 [ 1739.686445] handle_irq+0x35/0x50 [ 1739.686448] do_IRQ+0x93/0x1c0 [ 1739.686451] ret_from_intr+0x0/0x1e [ 1739.686455] _raw_spin_unlock_irqrestore+0xa3/0xe0 [ 1739.686458] uart_write+0x3bb/0x6f0 [ 1739.686461] do_output_char+0x5de/0x850 [ 1739.686464] n_tty_write+0x46e/0xff0 [ 1739.686467] tty_write+0x496/0x810 [ 1739.686470] redirected_tty_write+0xaa/0xb0 [ 1739.686473] do_iter_write+0x461/0x5d0 [ 1739.686477] vfs_writev+0x153/0x2e0 [ 1739.686479] do_writev+0x136/0x330 [ 1739.686483] do_syscall_64+0xf9/0x620 [ 1739.686487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.686489] [ 1739.686490] -> #1 (&port_lock_key){-.-.}: [ 1739.686502] serial8250_console_write+0x90e/0xb70 [ 1739.686505] console_unlock+0xbb6/0x1110 [ 1739.686508] vprintk_emit+0x2d1/0x740 [ 1739.686511] vprintk_func+0x79/0x180 [ 1739.686514] printk+0xba/0xed [ 1739.686517] register_console+0x87f/0xc90 [ 1739.686521] univ8250_console_init+0x3a/0x46 [ 1739.686524] console_init+0x4cb/0x718 [ 1739.686527] start_kernel+0x686/0x911 [ 1739.686530] secondary_startup_64+0xa4/0xb0 [ 1739.686532] [ 1739.686534] -> #0 (console_owner){-...}: [ 1739.686545] console_unlock+0x411/0x1110 [ 1739.686548] vprintk_emit+0x2d1/0x740 [ 1739.686552] vprintk_func+0x79/0x180 [ 1739.686554] printk+0xba/0xed [ 1739.686558] should_fail+0x66b/0x7b0 [ 1739.686561] __should_failslab+0x115/0x180 [ 1739.686564] should_failslab+0x5/0x10 [ 1739.686567] __kmalloc+0x6d/0x3c0 [ 1739.686571] tty_buffer_alloc+0x23f/0x2a0 [ 1739.686575] __tty_buffer_request_room+0x156/0x2a0 [ 1739.686578] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 1739.686582] pty_write+0x126/0x1f0 [ 1739.686585] n_tty_write+0xa03/0xff0 [ 1739.686588] tty_write+0x496/0x810 [ 1739.686591] __vfs_write+0xf7/0x770 [ 1739.686594] vfs_write+0x1f3/0x540 [ 1739.686597] ksys_write+0x12b/0x2a0 [ 1739.686600] do_syscall_64+0xf9/0x620 [ 1739.686604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.686606] [ 1739.686609] other info that might help us debug this: [ 1739.686611] [ 1739.686614] Chain exists of: [ 1739.686616] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 1739.686630] [ 1739.686633] Possible unsafe locking scenario: [ 1739.686635] [ 1739.686638] CPU0 CPU1 [ 1739.686641] ---- ---- [ 1739.686643] lock(&(&port->lock)->rlock); [ 1739.686651] lock(&port_lock_key); [ 1739.686659] lock(&(&port->lock)->rlock); [ 1739.686665] lock(console_owner); [ 1739.686671] [ 1739.686673] *** DEADLOCK *** [ 1739.686675] [ 1739.686679] 6 locks held by syz-executor.3/5521: [ 1739.686680] #0: 000000002a1f877b (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1739.686694] #1: 00000000982c32e3 (&tty->atomic_write_lock){+.+.}, at: tty_write+0x24e/0x810 [ 1739.686707] #2: 0000000093baeb12 (&tty->termios_rwsem){++++}, at: n_tty_write+0x1b5/0xff0 [ 1739.686721] #3: 000000003e5f241b (&ldata->output_lock){+.+.}, at: n_tty_write+0x9d0/0xff0 [ 1739.686734] #4: 00000000d3365462 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xf4/0x1f0 [ 1739.686747] #5: 0000000056809be2 (console_lock){+.+.}, at: vprintk_func+0x79/0x180 [ 1739.686760] [ 1739.686762] stack backtrace: [ 1739.686767] CPU: 0 PID: 5521 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1739.686773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1739.686776] Call Trace: [ 1739.686779] dump_stack+0x1fc/0x2ef [ 1739.686783] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 1739.686786] __lock_acquire+0x30c9/0x3ff0 [ 1739.686790] ? mark_held_locks+0xf0/0xf0 [ 1739.686793] ? snprintf+0xf0/0xf0 [ 1739.686796] ? console_unlock+0x3ec/0x1110 [ 1739.686799] lock_acquire+0x170/0x3c0 [ 1739.686803] ? console_unlock+0x3a9/0x1110 [ 1739.686806] console_unlock+0x411/0x1110 [ 1739.686809] ? console_unlock+0x3a9/0x1110 [ 1739.686812] vprintk_emit+0x2d1/0x740 [ 1739.686815] vprintk_func+0x79/0x180 [ 1739.686818] printk+0xba/0xed [ 1739.686821] ? log_store.cold+0x16/0x16 [ 1739.686824] ? __lock_acquire+0x6de/0x3ff0 [ 1739.686828] ? ___ratelimit+0x319/0x590 [ 1739.686830] should_fail+0x66b/0x7b0 [ 1739.686834] ? setup_fault_attr+0x200/0x200 [ 1739.686837] ? mark_held_locks+0xf0/0xf0 [ 1739.686840] ? lock_acquire+0x170/0x3c0 [ 1739.686844] __should_failslab+0x115/0x180 [ 1739.686846] should_failslab+0x5/0x10 [ 1739.686850] __kmalloc+0x6d/0x3c0 [ 1739.686853] ? tty_buffer_alloc+0x23f/0x2a0 [ 1739.686856] ? __mutex_lock+0x368/0x1190 [ 1739.686859] tty_buffer_alloc+0x23f/0x2a0 [ 1739.686863] __tty_buffer_request_room+0x156/0x2a0 [ 1739.686868] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 1739.686871] ? do_raw_spin_lock+0xcb/0x220 [ 1739.686874] pty_write+0x126/0x1f0 [ 1739.686877] n_tty_write+0xa03/0xff0 [ 1739.686881] ? __ldsem_down_read_nested+0xd2/0x780 [ 1739.686884] ? n_tty_open+0x160/0x160 [ 1739.686887] ? do_wait_intr_irq+0x270/0x270 [ 1739.686890] ? __might_fault+0x192/0x1d0 [ 1739.686894] tty_write+0x496/0x810 [ 1739.686896] ? n_tty_open+0x160/0x160 [ 1739.686900] __vfs_write+0xf7/0x770 [ 1739.686903] ? tty_compat_ioctl+0x270/0x270 [ 1739.686906] ? common_file_perm+0x4e5/0x850 [ 1739.686909] ? kernel_read+0x110/0x110 [ 1739.686913] ? apparmor_getprocattr+0x11e0/0x11e0 [ 1739.686917] ? security_file_permission+0x1c0/0x220 [ 1739.686920] vfs_write+0x1f3/0x540 [ 1739.686923] ksys_write+0x12b/0x2a0 [ 1739.686926] ? __ia32_sys_read+0xb0/0xb0 [ 1739.686930] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1739.686933] ? do_syscall_64+0x21/0x620 [ 1739.686936] do_syscall_64+0xf9/0x620 [ 1739.686940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1739.686943] RIP: 0033:0x7fefcb3050f9 [ 1739.686953] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1739.686957] RSP: 002b:00007fefc9877168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1739.686965] RAX: ffffffffffffffda RBX: 00007fefcb424f80 RCX: 00007fefcb3050f9 [ 1739.686970] RDX: 000000000000000c RSI: 0000000020000000 RDI: 0000000000000003 [ 1739.686974] RBP: 00007fefc98771d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.686979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.686983] R13: 00007ffcd7a2110f R14: 00007fefc9877300 R15: 0000000000022000 [ 1740.431901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1740.441261] Call Trace: [ 1740.443872] dump_stack+0x1fc/0x2ef [ 1740.447534] should_fail.cold+0xa/0xf [ 1740.451339] ? setup_fault_attr+0x200/0x200 [ 1740.455660] ? lock_acquire+0x170/0x3c0 [ 1740.459667] __should_failslab+0x115/0x180 [ 1740.463914] should_failslab+0x5/0x10 [ 1740.467728] kmem_cache_alloc_trace+0x284/0x380 [ 1740.472418] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1740.477471] ? dec_ucount+0x200/0x200 [ 1740.481281] call_usermodehelper_setup+0x84/0x300 [ 1740.486163] __request_module+0x42e/0xb80 [ 1740.490314] ? mark_held_locks+0xf0/0xf0 [ 1740.494379] ? sock_sendmsg+0xc3/0x120 [ 1740.498273] ? ___sys_sendmsg+0x7bb/0x8e0 [ 1740.502456] ? crypto_alg_mod_lookup+0x24f/0x4d0 [ 1740.507226] ? free_modprobe_argv+0x90/0x90 [ 1740.511652] ? debug_check_no_obj_freed+0x201/0x490 [ 1740.516682] ? crypto_alg_lookup+0x70/0x120 [ 1740.521020] ? lock_downgrade+0x720/0x720 [ 1740.525176] ? lock_acquire+0x170/0x3c0 [ 1740.529161] ? crypto_alg_lookup+0x41/0x120 [ 1740.533499] ? __crypto_alg_lookup+0x26d/0x2d0 [ 1740.538094] crypto_alg_mod_lookup+0x24f/0x4d0 [ 1740.542681] crypto_has_alg+0x21/0x70 [ 1740.546487] xfrm_probe_algs+0x1f9/0x2e0 [ 1740.550568] pfkey_register+0xe9/0x950 [ 1740.554465] ? __pfkey_xfrm_state2msg+0x3740/0x3740 [ 1740.559485] pfkey_process+0x66d/0x790 [ 1740.563381] ? pfkey_send_notify+0xfc0/0xfc0 [ 1740.567797] ? __mutex_lock+0x368/0x1190 [ 1740.571873] ? _copy_from_iter_full+0x229/0x7c0 [ 1740.576550] ? __phys_addr_symbol+0x2c/0x70 [ 1740.580893] ? __check_object_size+0x17b/0x3e0 [ 1740.585479] pfkey_sendmsg+0x40d/0x7d0 [ 1740.589373] ? pfkey_process+0x790/0x790 [ 1740.593444] sock_sendmsg+0xc3/0x120 [ 1740.597163] ___sys_sendmsg+0x7bb/0x8e0 [ 1740.601150] ? check_preemption_disabled+0x41/0x280 [ 1740.606170] ? copy_msghdr_from_user+0x440/0x440 [ 1740.610936] ? __fget+0x32f/0x510 [ 1740.614393] ? lock_downgrade+0x720/0x720 [ 1740.618565] ? check_preemption_disabled+0x41/0x280 [ 1740.623602] ? check_preemption_disabled+0x41/0x280 [ 1740.628632] ? __fget+0x356/0x510 [ 1740.632612] ? do_dup2+0x450/0x450 [ 1740.636160] ? lock_downgrade+0x720/0x720 [ 1740.640335] ? vfs_write+0x3d7/0x540 [ 1740.644058] ? __fdget+0x1d0/0x230 [ 1740.647629] __x64_sys_sendmsg+0x132/0x220 [ 1740.651877] ? __sys_sendmsg+0x1b0/0x1b0 [ 1740.655948] ? vfs_write+0x393/0x540 [ 1740.659674] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1740.665050] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1740.670084] ? do_syscall_64+0x21/0x620 [ 1740.674081] do_syscall_64+0xf9/0x620 [ 1740.677907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1740.683098] RIP: 0033:0x7f386d2990f9 [ 1740.686833] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1740.705734] RSP: 002b:00007f386b80b168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1740.713460] RAX: ffffffffffffffda RBX: 00007f386d3b8f80 RCX: 00007f386d2990f9 [ 1740.720731] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1740.728007] RBP: 00007f386b80b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.735279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 22:07:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:07:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) [ 1740.742560] R13: 00007fff1a33b43f R14: 00007f386b80b300 R15: 0000000000022000 22:07:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x8) 22:07:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:07:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) 22:07:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x80000) 22:07:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x8) 22:07:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:07:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000002, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x7ffffffff000) 22:07:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa07}, 0xc) 22:07:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x8) 22:07:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x8000000000000) 22:07:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa08}, 0xc) 22:07:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x8) 22:07:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0xf0ffffff7f0000) 22:07:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000003, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa0c}, 0xc) 22:07:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:40 executing program 5: shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x8) 22:07:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$FIONREAD(r0, 0x541b, 0x0) 22:07:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0x2000000c) 22:07:40 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:40 executing program 4: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:40 executing program 5: shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) 22:07:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 22:07:41 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:41 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000004, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:41 executing program 4: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:41 executing program 5: shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:41 executing program 2: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 22:07:41 executing program 4: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:41 executing program 3: accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_open_dev$ttys(0xc, 0x2, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) 22:07:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:41 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000005, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 22:07:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) (async) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) (async, rerun: 64) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) (async, rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:41 executing program 3: accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_open_dev$ttys(0xc, 0x2, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) (async) 22:07:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4, 0xfa02}, 0xc) 22:07:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) (async) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) (async) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) (async) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) (async, rerun: 64) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) (async, rerun: 64) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) (async, rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000006, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:42 executing program 3: accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0xa34, 0x7}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x71) 22:07:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8) 22:07:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000007, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0xa34, 0x7}) (async, rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x71) (rerun: 64) 22:07:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) 22:07:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0xa34, 0x7}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x71) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000008, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/151, 0x97) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffea}, 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xe7f, 0x12) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x8, 0x7, 0xfff8, 0xfffc, 0xe, "0b08e96dcc21c0b6"}) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x0, 0x8000, 0x1, @broadcast, 'gre0\x00'}) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$snapshot(r5, &(0x7f0000000140)="53c6e509dd85291a08562eb5667cf80f613d275eab5f8eed1c8ea8f16ea9f55ae8496ab200b9cefd04f23fb6618e73071bb1f9e83f7e7fa0601dbe905e24ae82eab39f876c17f67631", 0x49) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) 22:07:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/151, 0x97) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffea}, 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xe7f, 0x12) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x8, 0x7, 0xfff8, 0xfffc, 0xe, "0b08e96dcc21c0b6"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r1, &(0x7f0000000100)=""/151, 0x97) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffea}, 0xc) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xe7f, 0x12) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x8, 0x7, 0xfff8, 0xfffc, 0xe, "0b08e96dcc21c0b6"}) (async) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000009, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x18, 0x1}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x59, 0x18, "1e782667d766c5be"}) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x4, r3, 0x0, 0x0, 0x1}}, 0x20) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 22:07:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/151, 0x97) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffea}, 0xc) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xe7f, 0x12) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x8, 0x7, 0xfff8, 0xfffc, 0xe, "0b08e96dcc21c0b6"}) 22:07:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000028, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x18, 0x1}) (async, rerun: 64) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x59, 0x18, "1e782667d766c5be"}) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x4, r3, 0x0, 0x0, 0x1}}, 0x20) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 22:07:42 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) read$snapshot(r0, &(0x7f0000000040)=""/165, 0xa5) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:42 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) read$snapshot(r0, &(0x7f0000000040)=""/165, 0xa5) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x70000000000002d, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x18, 0x1}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x59, 0x18, "1e782667d766c5be"}) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r3}}, 0xc) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r5, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x4, r3, 0x0, 0x0, 0x1}}, 0x20) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) r3 = syz_open_pts(r0, 0x10080) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:42 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) read$snapshot(r0, &(0x7f0000000040)=""/165, 0xa5) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) (async) read$snapshot(r0, &(0x7f0000000040)=""/165, 0xa5) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x6) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}]}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x3ff, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x574d, {"77aa04919bef5922f16c42a43adbf373"}, 0x4b807088, 0xf, 0x40}, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0xeb8}}}, 0x118) 22:07:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000001c0)) syz_open_pts(r0, 0x10080) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) 22:07:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf015, 0x59}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 22:07:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x70000000000005f, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x6) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}]}) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x3ff, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x574d, {"77aa04919bef5922f16c42a43adbf373"}, 0x4b807088, 0xf, 0x40}, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0xeb8}}}, 0x118) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x6) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) (async) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}]}) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x3ff, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x574d, {"77aa04919bef5922f16c42a43adbf373"}, 0x4b807088, 0xf, 0x40}, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0xeb8}}}, 0x118) (async) 22:07:42 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 22:07:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async, rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf015, 0x59}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 22:07:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000240)=0x8) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x6) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}]}) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r4, 0x3ff, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x574d, {"77aa04919bef5922f16c42a43adbf373"}, 0x4b807088, 0xf, 0x40}, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0xeb8}}}, 0x118) 22:07:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 22:07:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000240)=0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf015, 0x59}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 22:07:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000300, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:43 executing program 4: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 22:07:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1a, 0x6, 0xff, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x31d) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) 22:07:43 executing program 4: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 4: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 22:07:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xffff, 0x101, 0x5, 0x200, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x64, &(0x7f0000000140)=""/100, 0x41000, 0xe, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000002c0)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0x1, 0x1]}, 0x80) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) ioctl$TCSBRK(r6, 0x5409, 0xfffffffffffffbff) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000080)={0x61, 0x6}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r8, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000000000)) 22:07:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x31d) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x31d) (async) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) (async) 22:07:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xffff, 0x101, 0x5, 0x200, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x64, &(0x7f0000000140)=""/100, 0x41000, 0xe, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000002c0)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0x1, 0x1]}, 0x80) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) ioctl$TCSBRK(r6, 0x5409, 0xfffffffffffffbff) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000080)={0x61, 0x6}) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r8, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000000000)) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x31d) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) 22:07:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 22:07:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000ac0)=""/146, 0x92) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r3, &(0x7f0000000ac0)=""/146, 0x92) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xffff, 0x101, 0x5, 0x200, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x64, &(0x7f0000000140)=""/100, 0x41000, 0xe, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000002c0)=[r1, r2, 0xffffffffffffffff, r3, r4, r5, 0x1, 0x1]}, 0x80) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) (async) ioctl$TCSBRK(r6, 0x5409, 0xfffffffffffffbff) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000080)={0x61, 0x6}) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r8, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000000000)) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x40, 0x0) 22:07:43 executing program 3: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x574, 0x3, 0x4, 0x9, 0x16, "d5aeefb049b64d19"}) 22:07:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x40, 0x0) 22:07:43 executing program 3: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:43 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x574, 0x3, 0x4, 0x9, 0x16, "d5aeefb049b64d19"}) 22:07:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000700, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 22:07:43 executing program 3: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x40, 0x0) 22:07:43 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x574, 0x3, 0x4, 0x9, 0x16, "d5aeefb049b64d19"}) 22:07:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 22:07:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) (async) 22:07:43 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x111}}, 0x20) 22:07:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x1}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8004085) 22:07:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000900, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) 22:07:43 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 22:07:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x1}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8004085) 22:07:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 22:07:44 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async, rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0xc0000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x1}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8004085) 22:07:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/148, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r1, 0x540c) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r3, @ANYBLOB="010026bd7000fffbdf2509000000da"], 0x58}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xffffffffffffff49, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32=r7, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) r9 = getpid() sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16, @ANYRES8, @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32=r14, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16=r12, @ANYRES8=r11, @ANYRES32=r13, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa6a}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1d}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xa0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x38}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x28000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r16 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x115000, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r16}]}, 0x34}, 0x1, 0x0, 0x0, 0x4814}, 0x2000c010) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r16, 0x3309) r17 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r17, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000002800, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x574, 0x3, 0x4, 0x9, 0x16, "d5aeefb049b64d19"}) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_pts(r0, 0x2140) ioctl$KDENABIO(r1, 0x4b36) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) [ 1744.891792] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x574, 0x3, 0x4, 0x9, 0x16, "d5aeefb049b64d19"}) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/148, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r3, @ANYBLOB="010026bd7000fffbdf2509000000da"], 0x58}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xffffffffffffff49, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32=r7, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) (async) r9 = getpid() (async) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16, @ANYRES8, @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) (async) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32=r14, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16=r12, @ANYRES8=r11, @ANYRES32=r13, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa6a}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1d}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xa0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x38}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x28000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) r16 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x115000, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r16}]}, 0x34}, 0x1, 0x0, 0x0, 0x4814}, 0x2000c010) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r16, 0x3309) (async) r17 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r17, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_pts(r0, 0x2140) ioctl$KDENABIO(r1, 0x4b36) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_open_pts(r0, 0x2140) (async) ioctl$KDENABIO(r1, 0x4b36) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) 22:07:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x574, 0x3, 0x4, 0x9, 0x16, "d5aeefb049b64d19"}) 22:07:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000002d00, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 1745.029928] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 64) r1 = syz_open_pts(r0, 0x2140) (rerun: 64) ioctl$KDENABIO(r1, 0x4b36) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/148, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r1, 0x540c) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r3, @ANYBLOB="010026bd7000fffbdf2509000000da"], 0x58}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xffffffffffffff49, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32=r7, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) r9 = getpid() (async) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16, @ANYRES8, @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010026bd7000fffbdf2509000000dafd010000000000050007000800000008000300", @ANYRES32, @ANYRES64, @ANYRES32=r14, @ANYBLOB="12bf13e907b0ecf3c70f860efb208943ba09c1fdb36a3f0ed4ee0b35235b1d7337a80d7648e916", @ANYRES16=r12, @ANYRES8=r11, @ANYRES32=r13, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008090) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa6a}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1d}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xa0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x38}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x28000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) r16 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x115000, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r16}]}, 0x34}, 0x1, 0x0, 0x0, 0x4814}, 0x2000c010) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r16, 0x3309) r17 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r17, &(0x7f0000000000)={0xa, 0x4}, 0xc) 22:07:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)={0x3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)}}, 0x20) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)={0x3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)={0x3}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) (async) 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000005f00, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)}}, 0x20) 22:07:44 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)={0x3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)={0x3}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) (async) [ 1745.341936] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x80880) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x35a, 0x80000000}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0xc) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)}}, 0x20) 22:07:44 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000020000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x80880) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x35a, 0x80000000}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0xc) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)}}, 0x20) 22:07:44 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:44 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x80880) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x35a, 0x80000000}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0xc) 22:07:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 22:07:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000034000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:45 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xff6f, 0x3, 0x3, 0x5, 0x12, "6008a0069a47d9c1"}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/4096) 22:07:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) 22:07:45 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x700000000000600, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:45 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xff6f, 0x3, 0x3, 0x5, 0x12, "6008a0069a47d9c1"}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/4096) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xff6f, 0x3, 0x3, 0x5, 0x12, "6008a0069a47d9c1"}) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/4096) (async) 22:07:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) 22:07:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000400300, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r1, &(0x7f0000000ac0)=""/146, 0x92) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) 22:07:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xff6f, 0x3, 0x3, 0x5, 0x12, "6008a0069a47d9c1"}) (async, rerun: 32) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/4096) (rerun: 32) 22:07:45 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 22:07:45 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0xaa600, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x1) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r4, &(0x7f00000001c0)=""/127, 0x7f) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$SNAPSHOT_FREE(r1, 0x3305) 22:07:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000600, 0x0, 0x0}, 0x0) 22:07:45 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000001000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:45 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000600, 0x0, 0x0}, 0x0) 22:07:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0xaa600, 0x0) (async, rerun: 64) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$TCSBRK(r3, 0x5409, 0x1) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) (async) read$snapshot(r4, &(0x7f00000001c0)=""/127, 0x7f) (async, rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) (rerun: 32) ioctl$SNAPSHOT_FREE(r1, 0x3305) 22:07:45 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x5, 0x100, 0x9, 0x3}}) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0x40, 0x2, {"355a3adaba9ebb5a701b8fb23fb22c65"}, 0x9, 0x3, 0x6}}}, 0x118) 22:07:45 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x3, 0xa, 0xf, &(0x7f0000000080)}) 22:07:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000000000600, 0x0, 0x0}, 0x0) 22:07:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 22:07:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x700000002000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:07:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$snapshot(r2, &(0x7f0000000ac0)=""/146, 0x92) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0xaa600, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x1) read$snapshot(r4, &(0x7f0000000ac0)=""/146, 0x92) read$snapshot(r4, &(0x7f00000001c0)=""/127, 0x7f) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) (async) ioctl$TCSBRK(r0, 0x5409, 0x6) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)