d57d91017f9de244df93253a93c73f6f327e017c9267cc0d42ec623956f7d0a5de8925c481aa29c4f6b69130673f2095903ff4fb5a148056466f1e16eee18387107c0f4d4b5dcb6fa62dc946fb9b185561707ab12dc8138153b4353271e927b05170c75c6", 0x57b, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x1, 0x4) 05:02:00 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x2, 0x5, 0x7d1, &(0x7f0000000000)) 05:02:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x57b, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 05:02:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:00 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="109c4accac6362cea6446aefbdae981ff0b270fa1d9500ee9260eb73bd444058dbc36c9950c27b1ceaedb5e8ba23ef", 0x2f, 0x48081, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:00 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x1, 0x4) 05:02:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x57b, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000400)=""/239, 0xef) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7e1b4bfa, 0x488000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000002c0)) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000200)={0x0, 0xd}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x1, 0x4}, 0x20) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x101, 0x6, {0x524a5176, 0x80, 0x6, 0x5}}) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x26) 05:02:00 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000400)=""/239, 0xef) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7e1b4bfa, 0x488000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000002c0)) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000200)={0x0, 0xd}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0x1, 0x4}, 0x20) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x101, 0x6, {0x524a5176, 0x80, 0x6, 0x5}}) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x26) 05:02:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)) socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:00 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="109c4accac6362cea6446aefbdae981ff0b270fa1d9500ee9260eb73bd444058dbc36c9950c27b1ceaedb5e8ba23ef", 0x2f, 0x48081, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:00 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0x1, 0x4) 05:02:00 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) semget$private(0x0, 0x0, 0x205) getpeername$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) 05:02:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40a, 0x4}, 0x20) 05:02:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x48081, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 05:02:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)) socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:00 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) semget$private(0x0, 0x0, 0x205) getpeername$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) 05:02:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40a, 0x4}, 0x20) 05:02:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40a, 0x4}, 0x20) 05:02:00 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) semget$private(0x0, 0x0, 0x205) getpeername$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) 05:02:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)) socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40a, 0x4}, 0x20) 05:02:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40a, 0x4}, 0x20) 05:02:00 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) semget$private(0x0, 0x0, 0x205) getpeername$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 05:02:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000280)) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) 05:02:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5c1, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r2) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r4) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40a, 0x4}, 0x20) 05:02:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x48081, 0x0, 0x0) 05:02:00 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', 0x0) 05:02:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="4dda29dea60cd47e66a0b694a179f12b84fbe96ba4c7df28149863ef06caf64c670ef21ba24f887917b774f2d87c4869613a4088c02eb33ecff6e8dc7271564cf3b9305cc87ea370c13f1f9d8dae26bcac2b4a43de703b5e1ec4b89dd3f9fe92900bfd739d5f4954237343e67ef404b3b8d1b6b288faed5243377ecfd83ea783d8ad457735dea2a80b935ace852b990af0d06a1a142080f9af95fb1ac25bd0a97fb6da8ac5a6b129709629ca5f6c0f91494af0d677b083027c199493aaeebe7260edd87e4a14cf155616f1c841c17eba28b68ed2d2ee3588d90abe473176d5124b2fdfe8684147ade1831fbd103da10b5ce28a509472a1edaf83c150cdc58b0a62ce9f4fdb90514b581df0199358317c9188f02f5ace35a16482939f3d0149c4513ffa054631ca925554788b0044fa1a4ffba3b4732ba776f029dac2a1fe032bc61c0c2f94c1e111ab1c9748e051d27f603f57d3340bdc4ab04ab8a3a0a1ad107573b9f8959a420b59fb1611c600a0b704483be5833ae83466942834212c6ac586c2ec909db247913ab1dea22527e5b2cf85871669009089d936a9c2cf6c983abd1ac5cd71e381c9749686e1b796d53e988cd4b57ab3110564c85a095b3c1471b999e4580f81f8f46ead3d70e4915fae6739bbfcaf06c22e437e30294bf15e0a67d1b1eb7f3f96a24255a2b6a05a47ab96a97607f6a92f00f5f735876a0bf4f9d39a3d774433b4db669e4cc9a3e2c76cc37108b442082db83050d8f501fcfb4069c6eea6f8b755c32f8225757fc16a8e2329a045394310c442df7fa55c9feb52f3357eaca5bdf5ffb9a3af355fdf789975e75a7b8e2c934aebcab08769bbd12059891efedf098943ea67df591c91cc320b5ede5ec074c357a3bcea1ddbbc4d08c6f664de340bb400ebdb8601b16a96cb00c74aadbf50f01788228d50147b74d86cffe24f950c7151c9f8d33670f5294465075ea33ead41a08e2c3359dab628654995007115c4083479a8aed8fe5fefcc43704c6d52fcd33c2ced7d15ae8c14385badb1f0da52afcdc29d4cb555e5fb4fdbd2ebc50bff3846373e7064117104c66271343baea8d2a0961fc194f3799d3d43c470b528c83531f5fb32f7b76154285a9cf053c9111e84cf221819b680b624f7f799c0942d3f2eceedca57ec54d4b5be0312088681f1f248619d8fe3feaa47347e85121f46aaa4827bf37dfbeaeadb671536350cdf77ec68dce344e09b3863a849b979cd14abeec57d061c5b66561e710664258f8b0718ac1c48eb61d6d79c0469aad709dc82a429c59d27ffb5955ce70cf6df6ea0619c33206b6ea2e7fad418c3d3175a7257229c819c73d71d069fb71f00f33e81b89a9ba53efa5a7b6e2dae847b83acfef86ec8a1ddd0056825758e3000e91f9a8e0eed0a90a23d933ee3bee2c31bf16bdc88036b601b22ed1fb86aa0a05da98dc9acdcbd1f28fbe7af9c533727afeebfae3768f1281dd007eb56d6281c803621bca4de326b16881710bc611598a0598c406102ff4b630a158b1ef5a8e319ff2bcf828470a46bb233006a5f340b09b2b681e7e97de9079ad7f77ee272f6ca45d4211143cf449760c357ae4d70ca793e3998a83c40d1e540dbdba12a97efb13023d8da71ebf385dec5f57a47124c9d69a04f49f82bc2a48b4c28cbd182164f94fedb3b47d9fbfc07774f0b444188840b02eb4c67e4a8d42a7408535d36c2b321e4b542897bdbb805a44f12fe967dc16801d85b5786c21ab7a78334231263b08f60fee3494ea38f3a9b33263cd9ddbf3910b116317b5aa51db16cabe3a132592862bda581d7a1d1114b3285c0c844de0aea2d57d91017f9de244df93253a93c73f6f327e017c9267cc0d42ec623956f7d0a5de8925c481aa29c4f6b69130673f2095903ff4fb5a148056466f1e16eee18387107c0f4d4b5dcb6fa62dc946fb9b185561707ab12dc8138153b4353271e927b05170c75c6fbf8b4ebb14a3dc3948b5dbe67ca545a8766f7ffd399c45784df6f52a6c83c43dfd9b27bb37e5a1ad31e5b9298aa95", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:00 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) semget$private(0x0, 0x0, 0x205) 05:02:00 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) 05:02:00 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', 0x0) 05:02:01 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) 05:02:01 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xa) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', 0x0) connect$l2tp6(r0, 0x0, 0x0) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) 05:02:01 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getsockname$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) keyctl$search(0xa, r1, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x3}, r3) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) getsockname$l2tp6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b6, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="4dda29dea60cd47e66a0b694a179f12b84fbe96ba4c7df28149863ef06caf64c670ef21ba24f887917b774f2d87c4869613a4088c02eb33ecff6e8dc7271564cf3b9305cc87ea370c13f1f9d8dae26bcac2b4a43de703b5e1ec4b89dd3f9fe92900bfd739d5f4954237343e67ef404b3b8d1b6b288faed5243377ecfd83ea783d8ad457735dea2a80b935ace852b990af0d06a1a142080f9af95fb1ac25bd0a97fb6da8ac5a6b129709629ca5f6c0f91494af0d677b083027c199493aaeebe7260edd87e4a14cf155616f1c841c17eba28b68ed2d2ee3588d90abe473176d5124b2fdfe8684147ade1831fbd103da10b5ce28a509472a1edaf83c150cdc58b0a62ce9f4fdb90514b581df0199358317c9188f02f5ace35a16482939f3d0149c4513ffa054631ca925554788b0044fa1a4ffba3b4732ba776f029dac2a1fe032bc61c0c2f94c1e111ab1c9748e051d27f603f57d3340bdc4ab04ab8a3a0a1ad107573b9f8959a420b59fb1611c600a0b704483be5833ae83466942834212c6ac586c2ec909db247913ab1dea22527e5b2cf85871669009089d936a9c2cf6c983abd1ac5cd71e381c9749686e1b796d53e988cd4b57ab3110564c85a095b3c1471b999e4580f81f8f46ead3d70e4915fae6739bbfcaf06c22e437e30294bf15e0a67d1b1eb7f3f96a24255a2b6a05a47ab96a97607f6a92f00f5f735876a0bf4f9d39a3d774433b4db669e4cc9a3e2c76cc37108b442082db83050d8f501fcfb4069c6eea6f8b755c32f8225757fc16a8e2329a045394310c442df7fa55c9feb52f3357eaca5bdf5ffb9a3af355fdf789975e75a7b8e2c934aebcab08769bbd12059891efedf098943ea67df591c91cc320b5ede5ec074c357a3bcea1ddbbc4d08c6f664de340bb400ebdb8601b16a96cb00c74aadbf50f01788228d50147b74d86cffe24f950c7151c9f8d33670f5294465075ea33ead41a08e2c3359dab628654995007115c4083479a8aed8fe5fefcc43704c6d52fcd33c2ced7d15ae8c14385badb1f0da52afcdc29d4cb555e5fb4fdbd2ebc50bff3846373e7064117104c66271343baea8d2a0961fc194f3799d3d43c470b528c83531f5fb32f7b76154285a9cf053c9111e84cf221819b680b624f7f799c0942d3f2eceedca57ec54d4b5be0312088681f1f248619d8fe3feaa47347e85121f46aaa4827bf37dfbeaeadb671536350cdf77ec68dce344e09b3863a849b979cd14abeec57d061c5b66561e710664258f8b0718ac1c48eb61d6d79c0469aad709dc82a429c59d27ffb5955ce70cf6df6ea0619c33206b6ea2e7fad418c3d3175a7257229c819c73d71d069fb71f00f33e81b89a9ba53efa5a7b6e2dae847b83acfef86ec8a1ddd0056825758e3000e91f9a8e0eed0a90a23d933ee3bee2c31bf16bdc88036b601b22ed1fb86aa0a05da98dc9acdcbd1f28fbe7af9c533727afeebfae3768f1281dd007eb56d6281c803621bca4de326b16881710bc611598a0598c406102ff4b630a158b1ef5a8e319ff2bcf828470a46bb233006a5f340b09b2b681e7e97de9079ad7f77ee272f6ca45d4211143cf449760c357ae4d70ca793e3998a83c40d1e540dbdba12a97efb13023d8da71ebf385dec5f57a47124c9d69a04f49f82bc2a48b4c28cbd182164f94fedb3b47d9fbfc07774f0b444188840b02eb4c67e4a8d42a7408535d36c2b321e4b542897bdbb805a44f12fe967dc16801d85b5786c21ab7a78334231263b08f60fee3494ea38f3a9b33263cd9ddbf3910b116317b5aa51db16cabe3a132592862bda581d7a1d1114b3285c0c844de0aea2d57d91017f9de244df93253a93c73f6f327e017c9267cc0d42ec623956f7d0a5de8925c481aa29c4f6b69130673f2095903ff4fb5a148056466f1e16eee18387107c0f4d4b5dcb6fa62dc946fb9b185561707ab12dc8138153b4353271e927b05170c75c6fbf8b4ebb14a3dc3948b5dbe67ca545a8766f7ffd399c45784df6f52a6c83c43dfd9b27bb37e5a1ad31e5b9298aa95", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) getsockname$l2tp6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x20) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) bind$alg(r0, 0x0, 0x0) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5ab, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5aa, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) 05:02:01 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x8060, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x20) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5ab, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x535040, 0x0) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5ab, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 05:02:01 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x20) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b1, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) 05:02:01 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) 05:02:01 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) 05:02:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="4dda29dea60cd47e66a0b694a179f12b84fbe96ba4c7df28149863ef06caf64c670ef21ba24f887917b774f2d87c4869613a4088c02eb33ecff6e8dc7271564cf3b9305cc87ea370c13f1f9d8dae26bcac2b4a43de703b5e1ec4b89dd3f9fe92900bfd739d5f4954237343e67ef404b3b8d1b6b288faed5243377ecfd83ea783d8ad457735dea2a80b935ace852b990af0d06a1a142080f9af95fb1ac25bd0a97fb6da8ac5a6b129709629ca5f6c0f91494af0d677b083027c199493aaeebe7260edd87e4a14cf155616f1c841c17eba28b68ed2d2ee3588d90abe473176d5124b2fdfe8684147ade1831fbd103da10b5ce28a509472a1edaf83c150cdc58b0a62ce9f4fdb90514b581df0199358317c9188f02f5ace35a16482939f3d0149c4513ffa054631ca925554788b0044fa1a4ffba3b4732ba776f029dac2a1fe032bc61c0c2f94c1e111ab1c9748e051d27f603f57d3340bdc4ab04ab8a3a0a1ad107573b9f8959a420b59fb1611c600a0b704483be5833ae83466942834212c6ac586c2ec909db247913ab1dea22527e5b2cf85871669009089d936a9c2cf6c983abd1ac5cd71e381c9749686e1b796d53e988cd4b57ab3110564c85a095b3c1471b999e4580f81f8f46ead3d70e4915fae6739bbfcaf06c22e437e30294bf15e0a67d1b1eb7f3f96a24255a2b6a05a47ab96a97607f6a92f00f5f735876a0bf4f9d39a3d774433b4db669e4cc9a3e2c76cc37108b442082db83050d8f501fcfb4069c6eea6f8b755c32f8225757fc16a8e2329a045394310c442df7fa55c9feb52f3357eaca5bdf5ffb9a3af355fdf789975e75a7b8e2c934aebcab08769bbd12059891efedf098943ea67df591c91cc320b5ede5ec074c357a3bcea1ddbbc4d08c6f664de340bb400ebdb8601b16a96cb00c74aadbf50f01788228d50147b74d86cffe24f950c7151c9f8d33670f5294465075ea33ead41a08e2c3359dab628654995007115c4083479a8aed8fe5fefcc43704c6d52fcd33c2ced7d15ae8c14385badb1f0da52afcdc29d4cb555e5fb4fdbd2ebc50bff3846373e7064117104c66271343baea8d2a0961fc194f3799d3d43c470b528c83531f5fb32f7b76154285a9cf053c9111e84cf221819b680b624f7f799c0942d3f2eceedca57ec54d4b5be0312088681f1f248619d8fe3feaa47347e85121f46aaa4827bf37dfbeaeadb671536350cdf77ec68dce344e09b3863a849b979cd14abeec57d061c5b66561e710664258f8b0718ac1c48eb61d6d79c0469aad709dc82a429c59d27ffb5955ce70cf6df6ea0619c33206b6ea2e7fad418c3d3175a7257229c819c73d71d069fb71f00f33e81b89a9ba53efa5a7b6e2dae847b83acfef86ec8a1ddd0056825758e3000e91f9a8e0eed0a90a23d933ee3bee2c31bf16bdc88036b601b22ed1fb86aa0a05da98dc9acdcbd1f28fbe7af9c533727afeebfae3768f1281dd007eb56d6281c803621bca4de326b16881710bc611598a0598c406102ff4b630a158b1ef5a8e319ff2bcf828470a46bb233006a5f340b09b2b681e7e97de9079ad7f77ee272f6ca45d4211143cf449760c357ae4d70ca793e3998a83c40d1e540dbdba12a97efb13023d8da71ebf385dec5f57a47124c9d69a04f49f82bc2a48b4c28cbd182164f94fedb3b47d9fbfc07774f0b444188840b02eb4c67e4a8d42a7408535d36c2b321e4b542897bdbb805a44f12fe967dc16801d85b5786c21ab7a78334231263b08f60fee3494ea38f3a9b33263cd9ddbf3910b116317b5aa51db16cabe3a132592862bda581d7a1d1114b3285c0c844de0aea2d57d91017f9de244df93253a93c73f6f327e017c9267cc0d42ec623956f7d0a5de8925c481aa29c4f6b69130673f2095903ff4fb5a148056466f1e16eee18387107c0f4d4b5dcb6fa62dc946fb9b185561707ab12dc8138153b4353271e927b05170c75c6fbf8b4ebb14a3dc3948b5dbe67ca545a8766f7ffd399c45784df6f52a6c83c43dfd9b27bb37e5a1ad31e5b9298aa95baa5", 0x5ac, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:01 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', 0x0) 05:02:02 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x20) 05:02:02 executing program 4: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:02 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 05:02:02 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 05:02:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5ac, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:02 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', 0x0) 05:02:02 executing program 4: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:02 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:02 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', 0x0) 05:02:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5ac, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:02 executing program 1: socket$packet(0x11, 0x2, 0x300) 05:02:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5af, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:03 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x20) 05:02:03 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:03 executing program 4: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:03 executing program 1: socket$packet(0x11, 0x2, 0x300) 05:02:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5af, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:03 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:03 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:03 executing program 1: socket$packet(0x11, 0x2, 0x300) 05:02:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5af, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:03 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:03 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:04 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:04 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x8060, 0x0, 0x0) 05:02:04 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b0, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:04 executing program 1: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b0, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:04 executing program 1: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 05:02:04 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xb4a, @empty, 0x9}, 0x20) 05:02:04 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:04 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:04 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 1: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="4dda29dea60cd47e66a0b694a179f12b84fbe96ba4c7df28149863ef06caf64c670ef21ba24f887917b774f2d87c4869613a4088c02eb33ecff6e8dc7271564cf3b9305cc87ea370c13f1f9d8dae26bcac2b4a43de703b5e1ec4b89dd3f9fe92900bfd739d5f4954237343e67ef404b3b8d1b6b288faed5243377ecfd83ea783d8ad457735dea2a80b935ace852b990af0d06a1a142080f9af95fb1ac25bd0a97fb6da8ac5a6b129709629ca5f6c0f91494af0d677b083027c199493aaeebe7260edd87e4a14cf155616f1c841c17eba28b68ed2d2ee3588d90abe473176d5124b2fdfe8684147ade1831fbd103da10b5ce28a509472a1edaf83c150cdc58b0a62ce9f4fdb90514b581df0199358317c9188f02f5ace35a16482939f3d0149c4513ffa054631ca925554788b0044fa1a4ffba3b4732ba776f029dac2a1fe032bc61c0c2f94c1e111ab1c9748e051d27f603f57d3340bdc4ab04ab8a3a0a1ad107573b9f8959a420b59fb1611c600a0b704483be5833ae83466942834212c6ac586c2ec909db247913ab1dea22527e5b2cf85871669009089d936a9c2cf6c983abd1ac5cd71e381c9749686e1b796d53e988cd4b57ab3110564c85a095b3c1471b999e4580f81f8f46ead3d70e4915fae6739bbfcaf06c22e437e30294bf15e0a67d1b1eb7f3f96a24255a2b6a05a47ab96a97607f6a92f00f5f735876a0bf4f9d39a3d774433b4db669e4cc9a3e2c76cc37108b442082db83050d8f501fcfb4069c6eea6f8b755c32f8225757fc16a8e2329a045394310c442df7fa55c9feb52f3357eaca5bdf5ffb9a3af355fdf789975e75a7b8e2c934aebcab08769bbd12059891efedf098943ea67df591c91cc320b5ede5ec074c357a3bcea1ddbbc4d08c6f664de340bb400ebdb8601b16a96cb00c74aadbf50f01788228d50147b74d86cffe24f950c7151c9f8d33670f5294465075ea33ead41a08e2c3359dab628654995007115c4083479a8aed8fe5fefcc43704c6d52fcd33c2ced7d15ae8c14385badb1f0da52afcdc29d4cb555e5fb4fdbd2ebc50bff3846373e7064117104c66271343baea8d2a0961fc194f3799d3d43c470b528c83531f5fb32f7b76154285a9cf053c9111e84cf221819b680b624f7f799c0942d3f2eceedca57ec54d4b5be0312088681f1f248619d8fe3feaa47347e85121f46aaa4827bf37dfbeaeadb671536350cdf77ec68dce344e09b3863a849b979cd14abeec57d061c5b66561e710664258f8b0718ac1c48eb61d6d79c0469aad709dc82a429c59d27ffb5955ce70cf6df6ea0619c33206b6ea2e7fad418c3d3175a7257229c819c73d71d069fb71f00f33e81b89a9ba53efa5a7b6e2dae847b83acfef86ec8a1ddd0056825758e3000e91f9a8e0eed0a90a23d933ee3bee2c31bf16bdc88036b601b22ed1fb86aa0a05da98dc9acdcbd1f28fbe7af9c533727afeebfae3768f1281dd007eb56d6281c803621bca4de326b16881710bc611598a0598c406102ff4b630a158b1ef5a8e319ff2bcf828470a46bb233006a5f340b09b2b681e7e97de9079ad7f77ee272f6ca45d4211143cf449760c357ae4d70ca793e3998a83c40d1e540dbdba12a97efb13023d8da71ebf385dec5f57a47124c9d69a04f49f82bc2a48b4c28cbd182164f94fedb3b47d9fbfc07774f0b444188840b02eb4c67e4a8d42a7408535d36c2b321e4b542897bdbb805a44f12fe967dc16801d85b5786c21ab7a78334231263b08f60fee3494ea38f3a9b33263cd9ddbf3910b116317b5aa51db16cabe3a132592862bda581d7a1d1114b3285c0c844de0aea2d57d91017f9de244df93253a93c73f6f327e017c9267cc0d42ec623956f7d0a5de8925c481aa29c4f6b69130673f2095903ff4fb5a148056466f1e16eee18387107c0f4d4b5dcb6fa62dc946fb9b185561707ab12dc8138153b4353271e927b05170c75c6fbf8b4ebb14a3dc3948b5dbe67ca545a8766f7ffd399c45784df6f52a6c83c43dfd9b27bb37e5a1ad31e5b9298aa95baa5a335945d", 0x5b0, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x7644, @mcast2, 0x0, 0x4}, 0x20) 05:02:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:02:04 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:04 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:02:04 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) 05:02:04 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b1, 0x0, 0x0, 0x0) 05:02:04 executing program 3: r0 = add_key$keyring(0x0, &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:02:04 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:04 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b1, 0x0, 0x0, 0x0) 05:02:04 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x9}, 0x20) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 05:02:04 executing program 1: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) 05:02:04 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x15, 0x80001, 0xfffffffc, &(0x7f00000001c0)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22040000}, 0x20000044) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 05:02:04 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="34e52bbd70fefbdbdf81010000000600deab1da227b3"], 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20040) connect$l2tp6(r0, 0x0, 0x0) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b1, 0x0, 0x0, 0x0) 05:02:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) 05:02:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b1, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x0, @mcast2, 0x0, 0x4}, 0x20) 05:02:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:04 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b1, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x0, @mcast2}, 0x20) 05:02:04 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:04 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:04 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', 0x0, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:04 executing program 5: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:04 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="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", 0x5b1, 0x0, &(0x7f0000001040)={0xa, 0x0, 0x0, @mcast2}, 0x20) 05:02:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', 0x0, &(0x7f0000000700)=')+\x00', r0) 05:02:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) sendto$l2tp6(r0, &(0x7f0000000040)="5266b4d9ae2bd5848bf74e585ea2d6a5de49aa16ce30a7251cf354aa4b270dd6f9bc831d3bf5ff4d5f7f32ae3ee9d87cea0db9e48d4e5fae5cf2d661e5e00639fb052d21c0bf59dfeae088537cc8ce8ae4d9ce33c17edf93f84a9aa1023fd94ffab486b24ccab64a15c5111fb63d5affe518c214204e8c8b7f3a30ab", 0x7c, 0x2000c800, &(0x7f00000000c0)={0xa, 0x0, 0x3ff, @mcast1, 0x2c, 0x4}, 0x20) 05:02:04 executing program 5: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:04 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:04 executing program 4: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 05:02:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) sendto$l2tp6(r0, &(0x7f0000000040)="5266b4d9ae2bd5848bf74e585ea2d6a5de49aa16ce30a7251cf354aa4b270dd6f9bc831d3bf5ff4d5f7f32ae3ee9d87cea0db9e48d4e5fae5cf2d661e5e00639fb052d21c0bf59dfeae088537cc8ce8ae4d9ce33c17edf93f84a9aa1023fd94ffab486b24ccab64a15c5111fb63d5affe518c214204e8c8b7f3a30ab", 0x7c, 0x2000c800, &(0x7f00000000c0)={0xa, 0x0, 0x3ff, @mcast1, 0x2c, 0x4}, 0x20) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4921c0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f00000000c0)={0x1}) 05:02:05 executing program 5: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', 0x0, &(0x7f0000000700)=')+\x00', r0) 05:02:05 executing program 1: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) sendto$l2tp6(r0, &(0x7f0000000040)="5266b4d9ae2bd5848bf74e585ea2d6a5de49aa16ce30a7251cf354aa4b270dd6f9bc831d3bf5ff4d5f7f32ae3ee9d87cea0db9e48d4e5fae5cf2d661e5e00639fb052d21c0bf59dfeae088537cc8ce8ae4d9ce33c17edf93f84a9aa1023fd94ffab486b24ccab64a15c5111fb63d5affe518c214204e8c8b7f3a30ab", 0x7c, 0x2000c800, &(0x7f00000000c0)={0xa, 0x0, 0x3ff, @mcast1, 0x2c, 0x4}, 0x20) 05:02:05 executing program 4: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4921c0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f00000000c0)={0x1}) 05:02:05 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, r0) 05:02:05 executing program 1: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 4: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 05:02:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, r0) 05:02:05 executing program 1: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:05 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4921c0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f00000000c0)={0x1}) 05:02:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:05 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4921c0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, r0) 05:02:05 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:05 executing program 3: add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', 0x0) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 05:02:05 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 05:02:05 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 3: add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', 0x0) 05:02:05 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 05:02:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 3: add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', 0x0) 05:02:05 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 05:02:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:02:05 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:05 executing program 3: add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)=')+\x00', 0x0) 05:02:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:02:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:02:05 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x101, @mcast1, 0x5}, 0x20) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4921c0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:05 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, r0) 05:02:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 05:02:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:05 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4921c0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xc341, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0)={0x27, 0x0, 0x2, 0x4, 0x4, 0x6, "8e2c97b44b6a29a1cc2beefd1aee0da81d1b89228f750ac55bc0c25bee35dd85f26baaa7ccf212468b7d53e20be601857fcf6434c2b8e557646f5276938e93", 0x3}, 0x60) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) socketpair(0x11, 0x5, 0x2, &(0x7f0000000140)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 05:02:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, r0) 05:02:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 05:02:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4921c0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 05:02:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x0}, 0x0, r0) 05:02:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 05:02:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 05:02:05 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:05 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x20) 05:02:05 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0002, 0x0) r3 = accept$nfc_llcp(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x60) accept$nfc_llcp(r3, 0xfffffffffffffffc, &(0x7f0000000400)) bind$alg(r1, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000200)={0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0002, 0x0) r3 = accept$nfc_llcp(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x60) accept$nfc_llcp(r3, 0xfffffffffffffffc, &(0x7f0000000400)) bind$alg(r1, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000200)={0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 05:02:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0002, 0x0) r3 = accept$nfc_llcp(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x60) accept$nfc_llcp(r3, 0xfffffffffffffffc, &(0x7f0000000400)) bind$alg(r1, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000200)={0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 4: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0002, 0x0) r3 = accept$nfc_llcp(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x60) accept$nfc_llcp(r3, 0xfffffffffffffffc, &(0x7f0000000400)) bind$alg(r1, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 4: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0002, 0x0) r2 = accept$nfc_llcp(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x60) accept$nfc_llcp(r2, 0xfffffffffffffffc, &(0x7f0000000400)) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:06 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 2: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0002, 0x0) accept$nfc_llcp(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x60) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 4: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 2: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0002, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:06 executing program 2: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:06 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:06 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:06 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 2: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:06 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:06 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 2: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 1: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0xd, 0x401}) syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:07 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:07 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x6e, 0x200) 05:02:07 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) 05:02:07 executing program 2: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:07 executing program 1: syz_open_dev$media(0x0, 0x6e, 0x200) 05:02:07 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:07 executing program 1: syz_open_dev$media(0x0, 0x6e, 0x200) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:07 executing program 1: syz_open_dev$media(0x0, 0x6e, 0x200) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x200) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x2}) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 5: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 5: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:07 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440002, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, r0) keyctl$search(0xa, r0, &(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) 05:02:08 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x2}) 05:02:08 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 2: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)='\x00\x02\x00', r3) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r4) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) 05:02:08 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)='\x00\x02\x00', r3) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r4) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, r2, r1) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r3) r4 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='&.\\\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r4, 0x0) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)='\x00\x02\x00', r3) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r4) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) 05:02:08 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 05:02:08 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)='\x00\x02\x00', r3) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r4) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r3, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) 05:02:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) 05:02:08 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (fail_nth: 1) 05:02:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (fail_nth: 1) 05:02:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c135a570a35ca670500"}) 05:02:08 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x1f}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c135a570a35ca670500"}) 05:02:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:08 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x1f}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c135a570a35ca670500"}) 05:02:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x1f}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:08 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c480, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x10b10000}) 05:02:08 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x1, 0x1}) 05:02:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c480, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x10b10000}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c480, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x10b10000}) (async) 05:02:08 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x1, 0x1}) 05:02:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:08 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 05:02:09 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c480, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x10b10000}) 05:02:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x1, 0x1}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x1, 0x1}) (async) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 05:02:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000040)='\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc51, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 05:02:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x2}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000040)='\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc51, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000040)='\x00') (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc51, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) 05:02:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000040)='\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc51, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x2}) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}]}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x7}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x200, 0x58800) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000001c0)) bind$alg(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x6, 0x4) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000040)) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000080)=0xc069) 05:02:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}]}) 05:02:09 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x7}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x200, 0x58800) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000001c0)) bind$alg(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x6, 0x4) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000040)) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000080)=0xc069) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x7}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x200, 0x58800) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000001c0)) (async) bind$alg(r2, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x6, 0x4) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000040)) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000080)=0xc069) (async) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}]}) 05:02:09 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x1, 0x1}) 05:02:09 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c480, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x10b10000}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$unlink(0x9, 0x0, r1) 05:02:09 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x7}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x200, 0x58800) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000001c0)) (async, rerun: 32) bind$alg(r2, 0x0, 0x0) (rerun: 32) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x6, 0x4) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000040)) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000080)=0xc069) (rerun: 64) 05:02:09 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x1, 0x1}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$unlink(0x9, 0x0, r1) 05:02:09 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x2}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$unlink(0x9, 0x0, r1) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$unlink(0x9, 0x0, r1) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) (async) keyctl$unlink(0x9, 0x0, r1) (async) 05:02:09 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x2}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x2}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:09 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x8, 0x1, 0x1}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r0) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000280)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) accept$alg(r4, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_VDPA_SET_STATUS(r5, 0x4001af72, &(0x7f0000000340)=0x14) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000005c0)={r3, &(0x7f0000000500)=[{0x80000000}], &(0x7f0000000540)}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000006c0)={r6, &(0x7f0000000600), &(0x7f0000000640)}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="85a0d8812f07467044927275fe5819d0e137f7bd9855c82cc07ecdd4ca04f78909000000000000001e03fdc6df8331f6a7e3819e063193050d2be52d6cc28cdb3483d194f9691b2b33967e9d41360c839a75f3534597b998a1bcaf23fcc9d4221f9efc062d2cc7cf9222411f06650179d28c0583d8299dd92f8df949a5608e7623114c23b347e0c788c98d75ddb5da574b2d2b8b139a695ca37e00000000000000000000000000000000fde1731f4f23a7e6de439c67daf7ae42961c3487f85bd838247a851e11989f66087758deca3ee82f93c2f6165d526202301245d8379a0a", @ANYRES16=0x0, @ANYBLOB="100129bd7000fcdbdf2500000000080018000a0101020800110001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xffffffff, 0x5a1e, 0x960, 0x2a, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000100)}, 0x10) 05:02:09 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x2}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:09 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 05:02:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$unlink(0x9, 0x0, r1) 05:02:09 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r0) (async) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000280)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) accept$alg(r4, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_VDPA_SET_STATUS(r5, 0x4001af72, &(0x7f0000000340)=0x14) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000005c0)={r3, &(0x7f0000000500)=[{0x80000000}], &(0x7f0000000540)}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000006c0)={r6, &(0x7f0000000600), &(0x7f0000000640)}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="85a0d8812f07467044927275fe5819d0e137f7bd9855c82cc07ecdd4ca04f78909000000000000001e03fdc6df8331f6a7e3819e063193050d2be52d6cc28cdb3483d194f9691b2b33967e9d41360c839a75f3534597b998a1bcaf23fcc9d4221f9efc062d2cc7cf9222411f06650179d28c0583d8299dd92f8df949a5608e7623114c23b347e0c788c98d75ddb5da574b2d2b8b139a695ca37e00000000000000000000000000000000fde1731f4f23a7e6de439c67daf7ae42961c3487f85bd838247a851e11989f66087758deca3ee82f93c2f6165d526202301245d8379a0a", @ANYRES16=0x0, @ANYBLOB="100129bd7000fcdbdf2500000000080018000a0101020800110001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xffffffff, 0x5a1e, 0x960, 0x2a, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x3}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000100)}, 0x10) 05:02:09 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x0, 0x3, 0x4, 0x3, 0x2}, 0xdad, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xc, 0xffffffffffffffff, 0x1f}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x6, 0x7, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xfffffffe}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:09 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x6, 0x7, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xfffffffe}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r0) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000280)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) accept$alg(r4, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_VDPA_SET_STATUS(r5, 0x4001af72, &(0x7f0000000340)=0x14) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000005c0)={r3, &(0x7f0000000500)=[{0x80000000}], &(0x7f0000000540)}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000006c0)={r6, &(0x7f0000000600), &(0x7f0000000640)}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="85a0d8812f07467044927275fe5819d0e137f7bd9855c82cc07ecdd4ca04f78909000000000000001e03fdc6df8331f6a7e3819e063193050d2be52d6cc28cdb3483d194f9691b2b33967e9d41360c839a75f3534597b998a1bcaf23fcc9d4221f9efc062d2cc7cf9222411f06650179d28c0583d8299dd92f8df949a5608e7623114c23b347e0c788c98d75ddb5da574b2d2b8b139a695ca37e00000000000000000000000000000000fde1731f4f23a7e6de439c67daf7ae42961c3487f85bd838247a851e11989f66087758deca3ee82f93c2f6165d526202301245d8379a0a", @ANYRES16=0x0, @ANYBLOB="100129bd7000fcdbdf2500000000080018000a0101020800110001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xffffffff, 0x5a1e, 0x960, 0x2a, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000100)}, 0x10) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) (async) keyctl$clear(0x7, r0) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000280)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) accept$alg(r4, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000002c0), 0x80) (async) ioctl$VHOST_VDPA_SET_STATUS(r5, 0x4001af72, &(0x7f0000000340)=0x14) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000005c0)={r3, &(0x7f0000000500), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000006c0)={r6, &(0x7f0000000600), &(0x7f0000000640)}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="85a0d8812f07467044927275fe5819d0e137f7bd9855c82cc07ecdd4ca04f78909000000000000001e03fdc6df8331f6a7e3819e063193050d2be52d6cc28cdb3483d194f9691b2b33967e9d41360c839a75f3534597b998a1bcaf23fcc9d4221f9efc062d2cc7cf9222411f06650179d28c0583d8299dd92f8df949a5608e7623114c23b347e0c788c98d75ddb5da574b2d2b8b139a695ca37e00000000000000000000000000000000fde1731f4f23a7e6de439c67daf7ae42961c3487f85bd838247a851e11989f66087758deca3ee82f93c2f6165d526202301245d8379a0a", @ANYRES16=0x0, @ANYBLOB="100129bd7000fcdbdf2500000000080018000a0101020800110001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xffffffff, 0x5a1e, 0x960, 0x2a, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x3}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000100)}, 0x10) (async) 05:02:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:09 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x6, 0x7, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xfffffffe}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x2}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:09 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x3f, 0x1], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0xffff, 0x6, 0x80000000, 0x10000, 0x0, 0x5, 0x6c}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xff, 0x800, 0x40000, 0x2, 0x0, "cf8611316ea6340e0000789fb44df835a76360", 0x0, 0x4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x5) 05:02:09 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) (async) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:09 executing program 0: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:09 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:09 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x3f, 0x1], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0xffff, 0x6, 0x80000000, 0x10000, 0x0, 0x5, 0x6c}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xff, 0x800, 0x40000, 0x2, 0x0, "cf8611316ea6340e0000789fb44df835a76360", 0x0, 0x4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x3f, 0x1], 0x3, 0x80000}) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0xffff, 0x6, 0x80000000, 0x10000, 0x0, 0x5, 0x6c}, 0x1c) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) (async) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000200)) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xff, 0x800, 0x40000, 0x2, 0x0, "cf8611316ea6340e0000789fb44df835a76360", 0x0, 0x4}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x5) (async) 05:02:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x2}) 05:02:09 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x3f, 0x1], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0xffff, 0x6, 0x80000000, 0x10000, 0x0, 0x5, 0x6c}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xff, 0x800, 0x40000, 0x2, 0x0, "cf8611316ea6340e0000789fb44df835a76360", 0x0, 0x4}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x5) 05:02:09 executing program 0: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:09 executing program 4: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:09 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) (async) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:10 executing program 0: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:10 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x3f, 0x1], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0xffff, 0x6, 0x80000000, 0x10000, 0x0, 0x5, 0x6c}, 0x1c) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xff, 0x800, 0x40000, 0x2, 0x0, "cf8611316ea6340e0000789fb44df835a76360", 0x0, 0x4}) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x5) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:10 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r5, 0x0, 0x0) (async) accept4$alg(r5, 0x0, 0x0, 0x80800) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) (async) bind$alg(r6, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) (async) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:10 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:10 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000040), 0x80) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:10 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:10 executing program 0: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r5, 0x0, 0x0) (async) accept4$alg(r5, 0x0, 0x0, 0x80800) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) (async) bind$alg(r6, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000400)={{r11, 0x0, 0x2, [0xb5b5, 0x10]}, {r12, r13, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) (async) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) r2 = syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0xfffffffffffffd87, 0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:10 executing program 0: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) syz_open_dev$media(&(0x7f0000000000), 0xff, 0x140) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 0: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:10 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000340)={r3}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000440)) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:10 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000340)={r3}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000440)) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x40000, 0x1, 0x7, "cf4cb44df835ca636000", 0x0, 0xfffffffb}) socket$inet_udp(0x2, 0x2, 0x0) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000340)={r3}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, &(0x7f0000000440)) 05:02:10 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x40000, 0x1, 0x7, "cf4cb44df835ca636000", 0x0, 0xfffffffb}) (async) socket$inet_udp(0x2, 0x2, 0x0) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r7, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x40000, 0x1, 0x7, "cf4cb44df835ca636000", 0x0, 0xfffffffb}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x40000, 0x1, 0x7, "cf4cb44df835ca636000", 0x0, 0xfffffffb}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 05:02:10 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:10 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 5: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x7f, 0x40000, 0x2, 0x0, "f835ca636000"}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109202, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x1, 0xfff, 0x8, 0x0, "a49d6429973e741d0416c8a0456640ed7188e5", 0x8, 0xfff}) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:10 executing program 5: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x7f, 0x40000, 0x2, 0x0, "f835ca636000"}) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109202, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x1, 0xfff, 0x8, 0x0, "a49d6429973e741d0416c8a0456640ed7188e5", 0x8, 0xfff}) (async, rerun: 32) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (rerun: 32) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 5: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x7f, 0x40000, 0x2, 0x0, "f835ca636000"}) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109202, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x1, 0xfff, 0x8, 0x0, "a49d6429973e741d0416c8a0456640ed7188e5", 0x8, 0xfff}) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:10 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 3: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4fffc, 0xc}) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:10 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80800) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r5, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r3, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 0: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 3: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4fffc, 0xc}) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4fffc, 0xc}) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:10 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80800) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r5, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r3, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 32) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 32) bind$alg(r6, 0x0, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:10 executing program 0: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 3: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4fffc, 0xc}) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4fffc, 0xc}) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:10 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80800) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000780)={r2}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r3, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 0: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:10 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="6abd126d2f22a2ae3bd314b8ba6f458162e196ca963a84fdace1509f6b9a677c4fb6c51e53905a2cfcc62d07b83d6857b0ea4f3a80fc4ed050584fe8ea0e6c85cff26b4c48f633f4cfa68ee236239040fe8d732afcaf53f977484136cbea0569cb4bfaf24e8a184c30ce42fc597812807546e4c54440fd8afcc20f9c6df0a658fb6ade0af208bbed161f0e6cba26a3a6d9f42f101c32e9af2f6839e16bcebdcb00b30acfa93361d7a49dc396b2b33983c0c92696523e21663d4901beb0dac86bde6fe8ecd27a0a0148673590a7a3b934b52e4e95824a71d1650c762f32d3b71221955945c7e988405dd8844ed81955633de33337e169661a213403", 0xfb, 0x1, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x2, 0x1}, 0x20) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:10 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 05:02:10 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="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", 0xfb, 0x1, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x2, 0x1}, 0x20) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) sendto$l2tp6(r0, &(0x7f0000000080)="6abd126d2f22a2ae3bd314b8ba6f458162e196ca963a84fdace1509f6b9a677c4fb6c51e53905a2cfcc62d07b83d6857b0ea4f3a80fc4ed050584fe8ea0e6c85cff26b4c48f633f4cfa68ee236239040fe8d732afcaf53f977484136cbea0569cb4bfaf24e8a184c30ce42fc597812807546e4c54440fd8afcc20f9c6df0a658fb6ade0af208bbed161f0e6cba26a3a6d9f42f101c32e9af2f6839e16bcebdcb00b30acfa93361d7a49dc396b2b33983c0c92696523e21663d4901beb0dac86bde6fe8ecd27a0a0148673590a7a3b934b52e4e95824a71d1650c762f32d3b71221955945c7e988405dd8844ed81955633de33337e169661a213403", 0xfb, 0x1, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x2, 0x1}, 0x20) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) (async) 05:02:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80800) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r2, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:10 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) (async, rerun: 64) syz_open_pts(r5, 0x141000) (rerun: 64) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:11 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) 05:02:11 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:11 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80800) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r2, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="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", 0xfb, 0x1, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x2, 0x1}, 0x20) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) sendto$l2tp6(r0, &(0x7f0000000080)="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", 0xfb, 0x1, &(0x7f00000001c0)={0xa, 0x0, 0x9, @private1, 0x2, 0x1}, 0x20) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) (async) 05:02:11 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:11 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:11 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r2, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x800, 0x123a00) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000340)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9000000, 0x22a, 0xfffffff8, 0xffff, 0x5, 0xffffffff, 0x6, 0x7ff], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:11 executing program 0: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:11 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80800) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r5, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r3, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r4, 0x141000) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x800, 0x123a00) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000340)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:11 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r2, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9000000, 0x22a, 0xfffffff8, 0xffff, 0x5, 0xffffffff, 0x6, 0x7ff], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x800, 0x123a00) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000340)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000280)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:11 executing program 0: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:11 executing program 3: ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:11 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r2, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) syz_open_pts(r4, 0x141000) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9000000, 0x22a, 0xfffffff8, 0xffff, 0x5, 0xffffffff, 0x6, 0x7ff], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (rerun: 64) 05:02:11 executing program 0: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) 05:02:11 executing program 3: ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (rerun: 32) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1000) syz_open_pts(r5, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x7ff, 0x4, '\x00', &(0x7f0000000040)=0x53}) 05:02:11 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, r1, 0xf, [0xed42, 0x1]}, {0x80000000, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) syz_open_pts(r4, 0x141000) 05:02:11 executing program 3: ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) keyctl$negate(0xd, r1, 0x4, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:11 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 5: ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x4fffc, 0xc}) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10983, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000240)={0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r4, 0x141000) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) (async) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) (async) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) (async) keyctl$negate(0xd, r1, 0x4, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:11 executing program 1: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 1: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) keyctl$negate(0xd, r1, 0x4, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) (async) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) (async) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) (async) keyctl$negate(0xd, r1, 0x4, r2) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) keyctl$negate(0xd, r1, 0x4, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10983, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000240)={0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:11 executing program 1: ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10983, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000240)={0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) keyctl$negate(0xd, r1, 0x4, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) keyctl$negate(0xd, r1, 0x4, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:11 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffa, 0x840) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1, 0x2, 0x2, 0x0, 0x1ff, 0xa3fc, 0xfffffffb}, 0x1c) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x5, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r4, 0x141000) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffa, 0x840) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1, 0x2, 0x2, 0x0, 0x1ff, 0xa3fc, 0xfffffffb}, 0x1c) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x5, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffa, 0x840) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1, 0x2, 0x2, 0x0, 0x1ff, 0xa3fc, 0xfffffffb}, 0x1c) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x5, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 05:02:11 executing program 2: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x2, "897a629bbfdf20bbdaca436d369a760ad43153bfeccd91b19a6c5e3c6ca129d7", 0x2, 0x5, 0x1, 0xb000, 0x102, 0x2}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:11 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) keyctl$negate(0xd, r1, 0x4, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x1, 0x2, 0x2, 0xffffffff}, 0x100, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x7, 0x3f, 0x84e}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r4, 0x141000) 05:02:11 executing program 2: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x2, "897a629bbfdf20bbdaca436d369a760ad43153bfeccd91b19a6c5e3c6ca129d7", 0x2, 0x5, 0x1, 0xb000, 0x102, 0x2}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffa, 0x840) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1, 0x2, 0x2, 0x0, 0x1ff, 0xa3fc, 0xfffffffb}, 0x1c) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x5, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffffffa, 0x840) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1, 0x2, 0x2, 0x0, 0x1ff, 0xa3fc, 0xfffffffb}, 0x1c) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x5, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) r1 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r2) keyctl$negate(0xd, r1, 0x4, r2) 05:02:11 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:11 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 2: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x2, "897a629bbfdf20bbdaca436d369a760ad43153bfeccd91b19a6c5e3c6ca129d7", 0x2, 0x5, 0x1, 0xb000, 0x102, 0x2}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000000)={0x2, "897a629bbfdf20bbdaca436d369a760ad43153bfeccd91b19a6c5e3c6ca129d7", 0x2, 0x5, 0x1, 0xb000, 0x102, 0x2}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/149, 0x95) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x3f, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000000)) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:11 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 05:02:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6, {0xffffffff, 0x10001, 0x0, 0x100}}) 05:02:11 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/149, 0x95) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x3f, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000000)) 05:02:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r2, 0x141000) 05:02:11 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0xf, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) 05:02:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6, {0xffffffff, 0x10001, 0x0, 0x100}}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 05:02:12 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/149, 0x95) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x3f, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000340)=""/149, 0x95) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x3f, 0x4) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000000)) (async) 05:02:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r2, 0x141000) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) 05:02:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6, {0xffffffff, 0x10001, 0x0, 0x100}}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$alg(r0, 0x0, 0x0, 0x800) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x141000) 05:02:12 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$alg(r0, 0x0, 0x0, 0x800) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) accept4$alg(r0, 0x0, 0x0, 0x800) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) (async) 05:02:12 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0xe408, &(0x7f0000000000)="8937a406d214241d259d568c10833f6dbe74c2494d69c7dc1a5bef749828ec1c5c67c1dd"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x141000) 05:02:12 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0xe408, &(0x7f0000000000)="8937a406d214241d259d568c10833f6dbe74c2494d69c7dc1a5bef749828ec1c5c67c1dd"}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x0, [0xed42, 0x1]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:12 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x0, [0xed42]}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:12 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept4$alg(r0, 0x0, 0x0, 0x800) (async) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0xe408, &(0x7f0000000000)="8937a406d214241d259d568c10833f6dbe74c2494d69c7dc1a5bef749828ec1c5c67c1dd"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000040)={0xe408, &(0x7f0000000000)="8937a406d214241d259d568c10833f6dbe74c2494d69c7dc1a5bef749828ec1c5c67c1dd"}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:12 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{}, {0x80000000, 0x0, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:12 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x2001) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x20) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000180), 0xfffffffffffffe87, 0x0, 0x0}) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{}, {0x80000000, 0x0, 0x0, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xcc59, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) 05:02:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r0 = syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x2001) (rerun: 64) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x20) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000180), 0xfffffffffffffe87, 0x0, 0x0}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r2, 0x141000) 05:02:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xcc59, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{}, {0x80000000, 0x0, 0x0, [0x3]}, 0x0, [0x1, 0x9]}) 05:02:12 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r2, 0x141000) 05:02:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x2001) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x20) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000180), 0xfffffffffffffe87, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x10000, 0x2001) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x20) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000180), 0xfffffffffffffe87, 0x0, 0x0}) (async) 05:02:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xcc59, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) 05:02:12 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{}, {}, 0x0, [0x1, 0x9]}) 05:02:12 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:12 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x8000) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x141000) 05:02:12 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffd, 0x60a401) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x0, 0x0, 0x0}) 05:02:12 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{}, {}, 0x0, [0x1]}) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:12 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffd, 0x60a401) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x0, 0x0, 0x0}) 05:02:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x141000) 05:02:12 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:12 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)) 05:02:12 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x8000) 05:02:12 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffd, 0x60a401) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x0, 0x0, 0x0}) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:12 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:12 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x3}, 0x20) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:12 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:12 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 32) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) syz_open_pts(r0, 0x8000) 05:02:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x3}, 0x20) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x141000) 05:02:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0xd8e0079a, 0x9, 0x0, 0x0, 0x1, 0x4c1, 0x36a1, 0x7, 0x7, 0x7fffffff, 0xfff, 0xb1ee, 0x5, 0x7fff, 0x4, 0x18, {0x8c5, 0x8000}, 0xfb, 0x9}}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000280)={0xd, 0x8}) pselect6(0x40, &(0x7f00000000c0)={0x800, 0x9, 0x1f, 0x1, 0x4, 0x1000, 0xffffffffffffffff, 0x100000001}, &(0x7f0000000140)={0x7, 0xffffffff, 0x2, 0x3, 0x7e5b056e, 0x1, 0x2, 0xbf1}, &(0x7f0000000180)={0x7, 0x3, 0x5, 0x5, 0x7f, 0x3e2a, 0x0, 0x7}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0xad61]}, 0x8}) 05:02:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r2, 0x141000) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x3}, 0x20) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0xd8e0079a, 0x9, 0x0, 0x0, 0x1, 0x4c1, 0x36a1, 0x7, 0x7, 0x7fffffff, 0xfff, 0xb1ee, 0x5, 0x7fff, 0x4, 0x18, {0x8c5, 0x8000}, 0xfb, 0x9}}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000280)={0xd, 0x8}) pselect6(0x40, &(0x7f00000000c0)={0x800, 0x9, 0x1f, 0x1, 0x4, 0x1000, 0xffffffffffffffff, 0x100000001}, &(0x7f0000000140)={0x7, 0xffffffff, 0x2, 0x3, 0x7e5b056e, 0x1, 0x2, 0xbf1}, &(0x7f0000000180)={0x7, 0x3, 0x5, 0x5, 0x7f, 0x3e2a, 0x0, 0x7}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0xad61]}, 0x8}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0xd8e0079a, 0x9, 0x0, 0x0, 0x1, 0x4c1, 0x36a1, 0x7, 0x7, 0x7fffffff, 0xfff, 0xb1ee, 0x5, 0x7fff, 0x4, 0x18, {0x8c5, 0x8000}, 0xfb, 0x9}}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000280)={0xd, 0x8}) (async) pselect6(0x40, &(0x7f00000000c0)={0x800, 0x9, 0x1f, 0x1, 0x4, 0x1000, 0xffffffffffffffff, 0x100000001}, &(0x7f0000000140)={0x7, 0xffffffff, 0x2, 0x3, 0x7e5b056e, 0x1, 0x2, 0xbf1}, &(0x7f0000000180)={0x7, 0x3, 0x5, 0x5, 0x7f, 0x3e2a, 0x0, 0x7}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0xad61]}, 0x8}) (async) 05:02:12 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 3: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x3, 0x3, 0x4, "1a1f728348d12907a579ebccf760ed1f124e7810e4c0ee79e303c5587181c2c1766d3c2aa841f3489e0710e33ec67247e7feb404425966320967cf4513c136", 0x1e}, 0x60) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0xfffffdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x0, 0x0, 0x0}) 05:02:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r2, 0x141000) 05:02:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x141000) 05:02:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0xd8e0079a, 0x9, 0x0, 0x0, 0x1, 0x4c1, 0x36a1, 0x7, 0x7, 0x7fffffff, 0xfff, 0xb1ee, 0x5, 0x7fff, 0x4, 0x18, {0x8c5, 0x8000}, 0xfb, 0x9}}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000280)={0xd, 0x8}) (async) pselect6(0x40, &(0x7f00000000c0)={0x800, 0x9, 0x1f, 0x1, 0x4, 0x1000, 0xffffffffffffffff, 0x100000001}, &(0x7f0000000140)={0x7, 0xffffffff, 0x2, 0x3, 0x7e5b056e, 0x1, 0x2, 0xbf1}, &(0x7f0000000180)={0x7, 0x3, 0x5, 0x5, 0x7f, 0x3e2a, 0x0, 0x7}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0xad61]}, 0x8}) 05:02:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6, {0xffffffff, 0x10001, 0x0, 0x100}}) 05:02:13 executing program 3: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x3, 0x3, 0x4, "1a1f728348d12907a579ebccf760ed1f124e7810e4c0ee79e303c5587181c2c1766d3c2aa841f3489e0710e33ec67247e7feb404425966320967cf4513c136", 0x1e}, 0x60) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0xfffffdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x0, 0x0, 0x0}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x3, 0x3, 0x4, "1a1f728348d12907a579ebccf760ed1f124e7810e4c0ee79e303c5587181c2c1766d3c2aa841f3489e0710e33ec67247e7feb404425966320967cf4513c136", 0x1e}, 0x60) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0xfffffdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r3, 0x141000) 05:02:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:13 executing program 2: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x20, 0x3f, 0x0, 0x2, 0x8, 0x40, 0x8]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x2}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socketpair(0x6, 0x80000, 0xaeae, &(0x7f0000000080)={0xffffffffffffffff}) bind$alg(r5, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f00000000c0)={0xfff, 0x24, "b99aa6f271ba4782fa8b5eae5b8e2493d3fbb44f928df28c4b64ab4f8da3396c89a73dba"}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 05:02:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:13 executing program 3: r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x3, 0x3, 0x4, "1a1f728348d12907a579ebccf760ed1f124e7810e4c0ee79e303c5587181c2c1766d3c2aa841f3489e0710e33ec67247e7feb404425966320967cf4513c136", 0x1e}, 0x60) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0xfffffdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x0, 0x0, 0x0}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x3, 0x3, 0x4, "1a1f728348d12907a579ebccf760ed1f124e7810e4c0ee79e303c5587181c2c1766d3c2aa841f3489e0710e33ec67247e7feb404425966320967cf4513c136", 0x1e}, 0x60) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0xfffffdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) 05:02:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0xfffffe01, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x8dd9) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240)='.)\x00', 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) 05:02:13 executing program 2: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x20, 0x3f, 0x0, 0x2, 0x8, 0x40, 0x8]}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 32) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x2}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async, rerun: 32) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 32) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async, rerun: 32) socketpair(0x6, 0x80000, 0xaeae, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 32) bind$alg(r5, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f00000000c0)={0xfff, 0x24, "b99aa6f271ba4782fa8b5eae5b8e2493d3fbb44f928df28c4b64ab4f8da3396c89a73dba"}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 05:02:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:13 executing program 1: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x20, 0x3f, 0x0, 0x2, 0x8, 0x40, 0x8]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x2}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socketpair(0x6, 0x80000, 0xaeae, &(0x7f0000000080)={0xffffffffffffffff}) bind$alg(r5, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f00000000c0)={0xfff, 0x24, "b99aa6f271ba4782fa8b5eae5b8e2493d3fbb44f928df28c4b64ab4f8da3396c89a73dba"}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 05:02:13 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r4, 0x141000) 05:02:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:13 executing program 2: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x20, 0x3f, 0x0, 0x2, 0x8, 0x40, 0x8]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x2}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socketpair(0x6, 0x80000, 0xaeae, &(0x7f0000000080)={0xffffffffffffffff}) bind$alg(r5, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f00000000c0)={0xfff, 0x24, "b99aa6f271ba4782fa8b5eae5b8e2493d3fbb44f928df28c4b64ab4f8da3396c89a73dba"}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x20, 0x3f, 0x0, 0x2, 0x8, 0x40, 0x8]}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x2}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) socketpair(0x6, 0x80000, 0xaeae, &(0x7f0000000080)) (async) bind$alg(r5, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f00000000c0)={0xfff, 0x24, "b99aa6f271ba4782fa8b5eae5b8e2493d3fbb44f928df28c4b64ab4f8da3396c89a73dba"}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) 05:02:13 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141000) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10983, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000240)={0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:13 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000", @ANYRES16=r3, @ANYBLOB="040126bd7000fcdbdf250200000008001800ac1e010108000b000300000006001c0007000000140008006272696467653000000000000000000008000b000000000008001900ac1e0101"], 0x50}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40080) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) syz_open_pts(r4, 0x141000) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10983, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000240)={0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:13 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:13 executing program 3: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10983, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000240)={0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:13 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10983, 0x0) 05:02:13 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x40000, 0x1, 0x7, "cf4cb44df835ca636000", 0x0, 0xfffffffb}) socket$inet_udp(0x2, 0x2, 0x0) 05:02:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000005c0)={0x7, 0x8, 0x1, 0x100, 0x81, "5ff0e1f144a17187ba911acf89579d006aaf19", 0xd7d, 0x7fffffff}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) semget(0x3, 0x2, 0x3a0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{r6, 0x0, 0x2, [0xb5b5, 0x10]}, {r7, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x2, 0x0, &(0x7f0000000180)=[{}, {}], 0x1, 0x0, &(0x7f0000000240)=[{}], 0xa, 0x0, &(0x7f00000002c0)=[{}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000500)={{r1, r8, 0x1, [0x4, 0x1]}, {r9, 0x0, 0x1, [0x6, 0x8]}, 0x4, [0x8622, 0x8]}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x200, 0x401, 0x8, 0x9, 0x3, "a13358107350c34f39f5b4fe985f324aa6d884", 0x1, 0x6}) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000600)) 05:02:13 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) write$tcp_mem(r1, &(0x7f0000000000)={0x100, 0x20, 0x8, 0x20, 0x1000}, 0x48) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_pts(r1, 0x40000) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000200)={0xd, 0x4}) 05:02:13 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:13 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x2aaaaaaaaaaab6c, 0x0, &(0x7f0000000000)=[{}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {0x0, 0x80000000}, {0x0, 0x80000000}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000600)=[{}, {}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000780)={r2}) bind$alg(r6, 0x0, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000500)={r3, &(0x7f0000000100), &(0x7f0000000880)}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000e40)={0x0, 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f00000005c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}], 0x7, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000400)={{0x80000000, 0x0, 0x2, [0xb5b5, 0x10]}, {0x80000000, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000540)={{0x80000000, 0x0, 0x0, [0x7f, 0x3]}, {0x80000000, r9, 0x0, [0xff, 0x2]}, 0x1, [0xfffffffd, 0xa743]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000ec0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r4, r1, 0xf, [0xed42, 0x1]}, {r11, r1, 0x4, [0x3, 0x1]}, 0x0, [0x1, 0x9]}) 05:02:13 executing program 1: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r1, 0x40000) 05:02:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) (async) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000005c0)={0x7, 0x8, 0x1, 0x100, 0x81, "5ff0e1f144a17187ba911acf89579d006aaf19", 0xd7d, 0x7fffffff}) (async, rerun: 32) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async, rerun: 32) semget(0x3, 0x2, 0x3a0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{r6, 0x0, 0x2, [0xb5b5, 0x10]}, {r7, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async, rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x2, 0x0, &(0x7f0000000180)=[{}, {}], 0x1, 0x0, &(0x7f0000000240)=[{}], 0xa, 0x0, &(0x7f00000002c0)=[{}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}]}) (rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000500)={{r1, r8, 0x1, [0x4, 0x1]}, {r9, 0x0, 0x1, [0x6, 0x8]}, 0x4, [0x8622, 0x8]}) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x200, 0x401, 0x8, 0x9, 0x3, "a13358107350c34f39f5b4fe985f324aa6d884", 0x1, 0x6}) (rerun: 32) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000600)) 05:02:13 executing program 4: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) 05:02:13 executing program 1: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) write$tcp_mem(r1, &(0x7f0000000000)={0x100, 0x20, 0x8, 0x20, 0x1000}, 0x48) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) 05:02:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x6, 0x7, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xfffffffe}) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180), 0x80) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) 05:02:13 executing program 1: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000005c0)={0x7, 0x8, 0x1, 0x100, 0x81, "5ff0e1f144a17187ba911acf89579d006aaf19", 0xd7d, 0x7fffffff}) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) semget(0x3, 0x2, 0x3a0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{r6, 0x0, 0x2, [0xb5b5, 0x10]}, {r7, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x2, 0x0, &(0x7f0000000180)=[{}, {}], 0x1, 0x0, &(0x7f0000000240)=[{}], 0xa, 0x0, &(0x7f00000002c0)=[{}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000500)={{r1, r8, 0x1, [0x4, 0x1]}, {r9, 0x0, 0x1, [0x6, 0x8]}, 0x4, [0x8622, 0x8]}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x200, 0x401, 0x8, 0x9, 0x3, "a13358107350c34f39f5b4fe985f324aa6d884", 0x1, 0x6}) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000600)) 05:02:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:13 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) write$tcp_mem(r1, &(0x7f0000000000)={0x100, 0x20, 0x8, 0x20, 0x1000}, 0x48) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) 05:02:13 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x1f}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180), 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) 05:02:13 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0xffff8001, 0x8000, 0x3ff, 0x6, "f191999751c6982c67e5c966357516844f929b", 0x80000001, 0x80a}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x400, 0x0, "cf4c113100ab3a8317a766814605000300"}) 05:02:13 executing program 3: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x0, 0x0, [0x1, 0x0, 0x2, 0x4, 0x1, 0x1, 0x80000001, 0x3]}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="a65d3c613581bb7598ffc5f3d57ef6312faebf4d41444cc13293886958cd877267f0fc625d59fb1b84bb84d5e0073e3d4054c99a2c6c81071c814cc5846e60d126c9338c5867796f5271b7ce06c854df9434df91fc285cfc5dc255348788c8836daf08d3aa79dc0b689d28210d1a3ae2c69ee60fd6c85c10015566a6dc5da72f70ca9dcc2fd2a965c055f9787098922abb799ae70fac1aecbd89eba2360daace9aba578ef252fc27b3ca419c2eb43ebddb1c0cd9feeb6aeadc5948772247d3c907a0e83a55493638"}) 05:02:13 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x8, 0x40000, 0x2, 0x80, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4, 0x2}) 05:02:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (fail_nth: 1) 05:02:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0xffff8001, 0x8000, 0x3ff, 0x6, "f191999751c6982c67e5c966357516844f929b", 0x80000001, 0x80a}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x400, 0x0, "cf4c113100ab3a8317a766814605000300"}) 05:02:13 executing program 3: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x0, 0x0, [0x1, 0x0, 0x2, 0x4, 0x1, 0x1, 0x80000001, 0x3]}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="a65d3c613581bb7598ffc5f3d57ef6312faebf4d41444cc13293886958cd877267f0fc625d59fb1b84bb84d5e0073e3d4054c99a2c6c81071c814cc5846e60d126c9338c5867796f5271b7ce06c854df9434df91fc285cfc5dc255348788c8836daf08d3aa79dc0b689d28210d1a3ae2c69ee60fd6c85c10015566a6dc5da72f70ca9dcc2fd2a965c055f9787098922abb799ae70fac1aecbd89eba2360daace9aba578ef252fc27b3ca419c2eb43ebddb1c0cd9feeb6aeadc5948772247d3c907a0e83a55493638"}) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) (async) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x0, 0x0, [0x1, 0x0, 0x2, 0x4, 0x1, 0x1, 0x80000001, 0x3]}) (async) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="a65d3c613581bb7598ffc5f3d57ef6312faebf4d41444cc13293886958cd877267f0fc625d59fb1b84bb84d5e0073e3d4054c99a2c6c81071c814cc5846e60d126c9338c5867796f5271b7ce06c854df9434df91fc285cfc5dc255348788c8836daf08d3aa79dc0b689d28210d1a3ae2c69ee60fd6c85c10015566a6dc5da72f70ca9dcc2fd2a965c055f9787098922abb799ae70fac1aecbd89eba2360daace9aba578ef252fc27b3ca419c2eb43ebddb1c0cd9feeb6aeadc5948772247d3c907a0e83a55493638"}) (async) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000180), 0x80) 05:02:13 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (fail_nth: 1) [ 555.273744] FAULT_INJECTION: forcing a failure. [ 555.273744] name failslab, interval 1, probability 0, space 0, times 0 [ 555.305817] CPU: 1 PID: 22637 Comm: syz-executor.0 Not tainted 4.14.294-syzkaller #0 [ 555.316078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 555.325435] Call Trace: [ 555.328024] dump_stack+0x1b2/0x281 [ 555.331657] should_fail.cold+0x10a/0x149 [ 555.335820] should_failslab+0xd6/0x130 [ 555.339798] kmem_cache_alloc+0x28e/0x3c0 [ 555.343952] getname_flags+0xc8/0x550 [ 555.347843] do_sys_open+0x1ce/0x410 [ 555.351613] ? filp_open+0x60/0x60 [ 555.355155] ? fput_many+0xe/0x140 [ 555.358693] ? do_syscall_64+0x4c/0x640 [ 555.362665] ? SyS_open+0x30/0x30 [ 555.366116] do_syscall_64+0x1d5/0x640 05:02:13 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:13 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) 05:02:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8000000, 0x0, 0x100, 0x2, 0x0, "cf4c11316ea6bc03a563789fb44df835ca6360"}) 05:02:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0xffff8001, 0x8000, 0x3ff, 0x6, "f191999751c6982c67e5c966357516844f929b", 0x80000001, 0x80a}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x400, 0x0, "cf4c113100ab3a8317a766814605000300"}) [ 555.370008] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 555.375280] RIP: 0033:0x7f409435b714 [ 555.378993] RSP: 002b:00007f4092d1d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 555.386708] RAX: ffffffffffffffda RBX: 00007f40944caf80 RCX: 00007f409435b714 [ 555.394062] RDX: 0000000000000000 RSI: 00007f4092d1d0d0 RDI: 00000000ffffff9c [ 555.401336] RBP: 00007f4092d1d0d0 R08: 0000000000000000 R09: 000000000000000a [ 555.408604] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 555.415871] R13: 00007fff29153d3f R14: 00007f4092d1d300 R15: 0000000000022000 05:02:13 executing program 3: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x0, 0x0, [0x1, 0x0, 0x2, 0x4, 0x1, 0x1, 0x80000001, 0x3]}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="a65d3c613581bb7598ffc5f3d57ef6312faebf4d41444cc13293886958cd877267f0fc625d59fb1b84bb84d5e0073e3d4054c99a2c6c81071c814cc5846e60d126c9338c5867796f5271b7ce06c854df9434df91fc285cfc5dc255348788c8836daf08d3aa79dc0b689d28210d1a3ae2c69ee60fd6c85c10015566a6dc5da72f70ca9dcc2fd2a965c055f9787098922abb799ae70fac1aecbd89eba2360daace9aba578ef252fc27b3ca419c2eb43ebddb1c0cd9feeb6aeadc5948772247d3c907a0e83a55493638"}) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) (async) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000080)={0x0, 0x0, [0x1, 0x0, 0x2, 0x4, 0x1, 0x1, 0x80000001, 0x3]}) (async) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="a65d3c613581bb7598ffc5f3d57ef6312faebf4d41444cc13293886958cd877267f0fc625d59fb1b84bb84d5e0073e3d4054c99a2c6c81071c814cc5846e60d126c9338c5867796f5271b7ce06c854df9434df91fc285cfc5dc255348788c8836daf08d3aa79dc0b689d28210d1a3ae2c69ee60fd6c85c10015566a6dc5da72f70ca9dcc2fd2a965c055f9787098922abb799ae70fac1aecbd89eba2360daace9aba578ef252fc27b3ca419c2eb43ebddb1c0cd9feeb6aeadc5948772247d3c907a0e83a55493638"}) (async) 05:02:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (fail_nth: 2) 05:02:14 executing program 5: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) 05:02:14 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) 05:02:14 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x46, 0xd83, 0xffff, 0x80000000, 0x6], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000000c0)}) 05:02:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8000000, 0x0, 0x100, 0x2, 0x0, "cf4c11316ea6bc03a563789fb44df835ca6360"}) 05:02:14 executing program 5: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) 05:02:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:14 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x46, 0xd83, 0xffff, 0x80000000, 0x6], 0x5, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) (rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000000c0)}) 05:02:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8000000, 0x0, 0x100, 0x2, 0x0, "cf4c11316ea6bc03a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8000000, 0x0, 0x100, 0x2, 0x0, "cf4c11316ea6bc03a563789fb44df835ca6360"}) (async) [ 555.568810] FAULT_INJECTION: forcing a failure. [ 555.568810] name failslab, interval 1, probability 0, space 0, times 0 [ 555.606416] CPU: 1 PID: 22685 Comm: syz-executor.0 Not tainted 4.14.294-syzkaller #0 [ 555.614343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 555.623786] Call Trace: [ 555.626474] dump_stack+0x1b2/0x281 [ 555.630113] should_fail.cold+0x10a/0x149 [ 555.634393] should_failslab+0xd6/0x130 [ 555.638376] kmem_cache_alloc+0x28e/0x3c0 [ 555.642584] get_empty_filp+0x86/0x3f0 [ 555.646493] path_openat+0x84/0x2970 [ 555.650301] ? __might_fault+0x177/0x1b0 [ 555.654368] ? path_lookupat+0x780/0x780 [ 555.658450] ? trace_hardirqs_on+0x10/0x10 [ 555.662849] ? tty_ioctl+0x354/0x1430 [ 555.666656] do_filp_open+0x179/0x3c0 [ 555.670934] ? may_open_dev+0xe0/0xe0 [ 555.674786] ? __alloc_fd+0x1be/0x490 [ 555.678593] ? lock_downgrade+0x740/0x740 [ 555.682747] ? do_raw_spin_unlock+0x164/0x220 [ 555.687241] ? _raw_spin_unlock+0x29/0x40 [ 555.691390] ? __alloc_fd+0x1be/0x490 [ 555.695202] do_sys_open+0x296/0x410 [ 555.698919] ? filp_open+0x60/0x60 [ 555.702478] ? fput_many+0xe/0x140 [ 555.706014] ? do_syscall_64+0x4c/0x640 [ 555.709985] ? SyS_open+0x30/0x30 [ 555.713445] do_syscall_64+0x1d5/0x640 05:02:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) [ 555.717340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 555.722527] RIP: 0033:0x7f409435b714 [ 555.726267] RSP: 002b:00007f4092d1d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 555.734017] RAX: ffffffffffffffda RBX: 00007f40944caf80 RCX: 00007f409435b714 [ 555.741285] RDX: 0000000000000000 RSI: 00007f4092d1d0d0 RDI: 00000000ffffff9c [ 555.748557] RBP: 00007f4092d1d0d0 R08: 0000000000000000 R09: 000000000000000a [ 555.755825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 555.763127] R13: 00007fff29153d3f R14: 00007f4092d1d300 R15: 0000000000022000 05:02:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (fail_nth: 3) 05:02:14 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x46, 0xd83, 0xffff, 0x80000000, 0x6], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000000c0)}) 05:02:14 executing program 5: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) 05:02:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000580)={0xd, 0x1}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{0x80000000}, {}, {}], 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000080)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000, 0x0}], &(0x7f0000000380)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000440)={{0x80000000, 0x0, 0x4, [0x9, 0x101]}, {r2, r3, 0x4, [0x8, 0x3ede00]}, 0x1, [0x3, 0x2]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 05:02:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 05:02:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x400}) 05:02:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000580)={0xd, 0x1}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{0x80000000}, {}, {}], 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000080)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000, 0x0}], &(0x7f0000000380)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000440)={{0x80000000, 0x0, 0x4, [0x9, 0x101]}, {r2, r3, 0x4, [0x8, 0x3ede00]}, 0x1, [0x3, 0x2]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 05:02:14 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) 05:02:14 executing program 3: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) getpeername$l2tp6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x20) 05:02:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) 05:02:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000580)={0xd, 0x1}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{0x80000000}, {}, {}], 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000080)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000, 0x0}], &(0x7f0000000380)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000440)={{0x80000000, 0x0, 0x4, [0x9, 0x101]}, {r2, r3, 0x4, [0x8, 0x3ede00]}, 0x1, [0x3, 0x2]}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000580)={0xd, 0x1}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000080)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000280)=[{}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, &(0x7f0000000340), &(0x7f0000000380)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000440)={{0x80000000, 0x0, 0x4, [0x9, 0x101]}, {r2, r3, 0x4, [0x8, 0x3ede00]}, 0x1, [0x3, 0x2]}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) (async) [ 555.877977] FAULT_INJECTION: forcing a failure. [ 555.877977] name failslab, interval 1, probability 0, space 0, times 0 [ 555.947611] CPU: 0 PID: 22723 Comm: syz-executor.0 Not tainted 4.14.294-syzkaller #0 [ 555.955554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 555.964909] Call Trace: [ 555.967505] dump_stack+0x1b2/0x281 [ 555.971629] should_fail.cold+0x10a/0x149 [ 555.975828] should_failslab+0xd6/0x130 [ 555.979806] kmem_cache_alloc+0x28e/0x3c0 [ 555.984041] get_empty_filp+0x86/0x3f0 [ 555.987928] path_openat+0x84/0x2970 [ 555.991651] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 555.996496] ? __might_fault+0x177/0x1b0 [ 556.000562] ? path_lookupat+0x780/0x780 [ 556.004630] ? trace_hardirqs_on+0x10/0x10 [ 556.008865] ? tty_ioctl+0x354/0x1430 [ 556.012673] do_filp_open+0x179/0x3c0 [ 556.016474] ? may_open_dev+0xe0/0xe0 [ 556.020278] ? __alloc_fd+0x1be/0x490 [ 556.024115] ? lock_downgrade+0x740/0x740 [ 556.028262] ? do_raw_spin_unlock+0x164/0x220 [ 556.032765] ? _raw_spin_unlock+0x29/0x40 [ 556.036909] ? __alloc_fd+0x1be/0x490 [ 556.040815] do_sys_open+0x296/0x410 [ 556.044537] ? filp_open+0x60/0x60 [ 556.048076] ? fput_many+0xe/0x140 [ 556.051618] ? do_syscall_64+0x4c/0x640 [ 556.058898] ? SyS_open+0x30/0x30 [ 556.062389] do_syscall_64+0x1d5/0x640 [ 556.066285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 556.071562] RIP: 0033:0x7f409435b714 [ 556.075267] RSP: 002b:00007f4092d1d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 556.082969] RAX: ffffffffffffffda RBX: 00007f40944caf80 RCX: 00007f409435b714 [ 556.090227] RDX: 0000000000000000 RSI: 00007f4092d1d0d0 RDI: 00000000ffffff9c 05:02:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (fail_nth: 4) 05:02:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x400}) 05:02:14 executing program 3: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) (async) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) (async, rerun: 64) getpeername$l2tp6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x20) (rerun: 64) 05:02:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0xa0c00) 05:02:14 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) [ 556.097478] RBP: 00007f4092d1d0d0 R08: 0000000000000000 R09: 000000000000000a [ 556.104732] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 556.111983] R13: 00007fff29153d3f R14: 00007f4092d1d300 R15: 0000000000022000 05:02:14 executing program 3: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) (async) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) (async) getpeername$l2tp6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x20) 05:02:14 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) getpeername$l2tp6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x20) 05:02:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x400}) 05:02:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0xa0c00) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0xa0c00) (async) [ 556.203094] FAULT_INJECTION: forcing a failure. [ 556.203094] name failslab, interval 1, probability 0, space 0, times 0 05:02:14 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)) 05:02:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x8000}) 05:02:14 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) [ 556.243440] CPU: 0 PID: 22777 Comm: syz-executor.0 Not tainted 4.14.294-syzkaller #0 [ 556.251361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 556.260715] Call Trace: [ 556.263306] dump_stack+0x1b2/0x281 [ 556.266942] should_fail.cold+0x10a/0x149 [ 556.271097] should_failslab+0xd6/0x130 [ 556.275082] kmem_cache_alloc_trace+0x29a/0x3d0 [ 556.279753] ? tty_kopen+0x1c0/0x1c0 [ 556.283468] tty_open+0x11a/0x8b0 [ 556.286928] ? lock_acquire+0x170/0x3f0 [ 556.290904] ? tty_kopen+0x1c0/0x1c0 [ 556.294623] ? tty_kopen+0x1c0/0x1c0 [ 556.298423] chrdev_open+0x23c/0x6d0 [ 556.306747] ? __register_chrdev+0x3d0/0x3d0 [ 556.311173] do_dentry_open+0x44b/0xec0 [ 556.315148] ? __register_chrdev+0x3d0/0x3d0 [ 556.319558] ? __inode_permission+0xcd/0x2f0 [ 556.323977] vfs_open+0x105/0x220 [ 556.327434] path_openat+0x628/0x2970 [ 556.331242] ? path_lookupat+0x780/0x780 [ 556.335332] ? trace_hardirqs_on+0x10/0x10 [ 556.339648] ? tty_ioctl+0x354/0x1430 [ 556.343435] do_filp_open+0x179/0x3c0 [ 556.347217] ? may_open_dev+0xe0/0xe0 [ 556.351001] ? lock_downgrade+0x740/0x740 [ 556.355140] ? do_raw_spin_unlock+0x164/0x220 [ 556.359617] ? _raw_spin_unlock+0x29/0x40 [ 556.363749] ? __alloc_fd+0x1be/0x490 [ 556.367538] do_sys_open+0x296/0x410 [ 556.371235] ? filp_open+0x60/0x60 [ 556.374757] ? fput_many+0xe/0x140 [ 556.378277] ? do_syscall_64+0x4c/0x640 [ 556.382232] ? SyS_open+0x30/0x30 [ 556.385668] do_syscall_64+0x1d5/0x640 [ 556.389542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 556.394712] RIP: 0033:0x7f409435b714 [ 556.398403] RSP: 002b:00007f4092d1d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 556.406113] RAX: ffffffffffffffda RBX: 00007f40944caf80 RCX: 00007f409435b714 [ 556.413364] RDX: 0000000000000000 RSI: 00007f4092d1d0d0 RDI: 00000000ffffff9c [ 556.420614] RBP: 00007f4092d1d0d0 R08: 0000000000000000 R09: 000000000000000a [ 556.427863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 556.435112] R13: 00007fff29153d3f R14: 00007f4092d1d300 R15: 0000000000022000 05:02:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (fail_nth: 5) 05:02:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x8000}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x8000}) (async) 05:02:15 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) getpeername$l2tp6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x20) 05:02:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0xa0c00) 05:02:15 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x8000}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x8000}) (async) 05:02:15 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x10000, 0x1, 0x10000009}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfff7fe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x0, 0x8, 0x1, 0x0, 0x200, 0x2, 0x400, 0xffff, 0xffff, 0x6, 0xffffffc0, 0x80000000, 0x8, 0xfffffffe, 0x13, 0x20, {0x8000, 0x1}, 0x8}}) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) getpeername$l2tp6(r4, &(0x7f0000000000), &(0x7f0000000040)=0x20) 05:02:15 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) 05:02:15 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000000)) (rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24f1ffff1a9915797dcb669abc88b9e0e67bfa7ae7bdc38e54c0485eb9d483", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250700000008000c00020000000500220001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2840) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000002c0)={0x4, 0x0, [{0x3, 0x7, 0x10000, [0x7, 0xffffffe0, 0x1, 0x290, 0x7adb00ca, 0x200, 0x2, 0x4]}, {0x2, 0x2, 0x5, [0x0, 0x1400000, 0x7, 0x5, 0x800, 0xcf3, 0x6, 0x4]}, {0x0, 0x7, 0x1, [0x40, 0x3ff, 0xffffff01, 0x147e00, 0x5e07, 0x5, 0xb8, 0x7]}, {0xffffffff, 0x100, 0x3e000, [0x1f, 0x80000000, 0x80000001, 0x4, 0xff, 0x3, 0x81, 0xfffffff8]}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x8000}, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r2, 0x0) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000000c0)) 05:02:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x10000, 0x1, 0x10000009}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfff7fe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x0, 0x8, 0x1, 0x0, 0x200, 0x2, 0x400, 0xffff, 0xffff, 0x6, 0xffffffc0, 0x80000000, 0x8, 0xfffffffe, 0x13, 0x20, {0x8000, 0x1}, 0x8}}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x10000, 0x1, 0x10000009}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfff7fe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x0, 0x8, 0x1, 0x0, 0x200, 0x2, 0x400, 0xffff, 0xffff, 0x6, 0xffffffc0, 0x80000000, 0x8, 0xfffffffe, 0x13, 0x20, {0x8000, 0x1}, 0x8}}) (async) 05:02:15 executing program 3: clock_gettime(0x5, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffc, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x3, 0x4, 0x800}, {0x0, 0x6156, 0x785648168a20c61b}, {0x0, 0x5, 0x800}, {0x3, 0xfffa}], 0x4, &(0x7f0000000080)={0x77359400}) 05:02:15 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, 0x0) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) 05:02:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x242002, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x2, 0xae, 0x2, 0x20, 0x4, 0x1, 0x2]}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) 05:02:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24f1ffff1a9915797dcb669abc88b9e0e67bfa7ae7bdc38e54c0485eb9d483", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250700000008000c00020000000500220001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2840) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000002c0)={0x4, 0x0, [{0x3, 0x7, 0x10000, [0x7, 0xffffffe0, 0x1, 0x290, 0x7adb00ca, 0x200, 0x2, 0x4]}, {0x2, 0x2, 0x5, [0x0, 0x1400000, 0x7, 0x5, 0x800, 0xcf3, 0x6, 0x4]}, {0x0, 0x7, 0x1, [0x40, 0x3ff, 0xffffff01, 0x147e00, 0x5e07, 0x5, 0xb8, 0x7]}, {0xffffffff, 0x100, 0x3e000, [0x1f, 0x80000000, 0x80000001, 0x4, 0xff, 0x3, 0x81, 0xfffffff8]}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x8000}, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24f1ffff1a9915797dcb669abc88b9e0e67bfa7ae7bdc38e54c0485eb9d483", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250700000008000c00020000000500220001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2840) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000002c0)={0x4, 0x0, [{0x3, 0x7, 0x10000, [0x7, 0xffffffe0, 0x1, 0x290, 0x7adb00ca, 0x200, 0x2, 0x4]}, {0x2, 0x2, 0x5, [0x0, 0x1400000, 0x7, 0x5, 0x800, 0xcf3, 0x6, 0x4]}, {0x0, 0x7, 0x1, [0x40, 0x3ff, 0xffffff01, 0x147e00, 0x5e07, 0x5, 0xb8, 0x7]}, {0xffffffff, 0x100, 0x3e000, [0x1f, 0x80000000, 0x80000001, 0x4, 0xff, 0x3, 0x81, 0xfffffff8]}]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x8000}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) syz_open_pts(r2, 0x0) (async) 05:02:15 executing program 3: clock_gettime(0x5, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffc, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x3, 0x4, 0x800}, {0x0, 0x6156, 0x785648168a20c61b}, {0x0, 0x5, 0x800}, {0x3, 0xfffa}], 0x4, &(0x7f0000000080)={0x77359400}) clock_gettime(0x5, &(0x7f0000000000)) (async) syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffc, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x3, 0x4, 0x800}, {0x0, 0x6156, 0x785648168a20c61b}, {0x0, 0x5, 0x800}, {0x3, 0xfffa}], 0x4, &(0x7f0000000080)={0x77359400}) (async) 05:02:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async, rerun: 32) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) (async, rerun: 32) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1000}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x242002, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async, rerun: 64) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) (async, rerun: 64) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x2, 0xae, 0x2, 0x20, 0x4, 0x1, 0x2]}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) 05:02:15 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, 0x0) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) 05:02:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x10000, 0x1, 0x10000009}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfff7fe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x0, 0x8, 0x1, 0x0, 0x200, 0x2, 0x400, 0xffff, 0xffff, 0x6, 0xffffffc0, 0x80000000, 0x8, 0xfffffffe, 0x13, 0x20, {0x8000, 0x1}, 0x8}}) 05:02:15 executing program 3: clock_gettime(0x5, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffc, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x3, 0x4, 0x800}, {0x0, 0x6156, 0x785648168a20c61b}, {0x0, 0x5, 0x800}, {0x3, 0xfffa}], 0x4, &(0x7f0000000080)={0x77359400}) clock_gettime(0x5, &(0x7f0000000000)) (async) syz_open_dev$media(&(0x7f0000000300), 0xfffffffffffffffc, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x3, 0x4, 0x800}, {0x0, 0x6156, 0x785648168a20c61b}, {0x0, 0x5, 0x800}, {0x3, 0xfffa}], 0x4, &(0x7f0000000080)={0x77359400}) (async) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, 0x0) 05:02:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1000}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x242002, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x2, 0xae, 0x2, 0x20, 0x4, 0x1, 0x2]}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) 05:02:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24f1ffff1a9915797dcb669abc88b9e0e67bfa7ae7bdc38e54c0485eb9d483", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250700000008000c00020000000500220001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2840) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000002c0)={0x4, 0x0, [{0x3, 0x7, 0x10000, [0x7, 0xffffffe0, 0x1, 0x290, 0x7adb00ca, 0x200, 0x2, 0x4]}, {0x2, 0x2, 0x5, [0x0, 0x1400000, 0x7, 0x5, 0x800, 0xcf3, 0x6, 0x4]}, {0x0, 0x7, 0x1, [0x40, 0x3ff, 0xffffff01, 0x147e00, 0x5e07, 0x5, 0xb8, 0x7]}, {0xffffffff, 0x100, 0x3e000, [0x1f, 0x80000000, 0x80000001, 0x4, 0xff, 0x3, 0x81, 0xfffffff8]}]}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) bind$alg(r1, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x8000}, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r2, 0x0, 0x0) (async) syz_open_pts(r2, 0x0) 05:02:15 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) request_key(&(0x7f00000011c0)='trusted\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0xfffffffffffffffd) syz_open_dev$media(&(0x7f0000000000), 0xa628b3c, 0x801) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="717f351b8c1977b1636fe1c24c4c1753995106921bbce59a6ec3cbb5c2a154a6b7bdb35fdac8ce5f59eeaa03c4", 0x2d) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffd, 0x5, 0x80000001, 0xfffffffe, 0x0, "cf4c11b16ea6bc69a5ff7835ca6360fe63a0b9", 0x0, 0x3958}) 05:02:15 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) request_key(&(0x7f00000011c0)='trusted\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0xfffffffffffffffd) syz_open_dev$media(&(0x7f0000000000), 0xa628b3c, 0x801) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 05:02:15 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="717f351b8c1977b1636fe1c24c4c1753995106921bbce59a6ec3cbb5c2a154a6b7bdb35fdac8ce5f59eeaa03c4", 0x2d) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffd, 0x5, 0x80000001, 0xfffffffe, 0x0, "cf4c11b16ea6bc69a5ff7835ca6360fe63a0b9", 0x0, 0x3958}) 05:02:15 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) 05:02:15 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x1, 0x0, 0x1, 0x7}, 0x7, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x7fffffff, 0x100000001, 0x5, 0x207f}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xd55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0)=[{}, {0x80000000}], &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r4, &(0x7f00000006c0), &(0x7f0000000640)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r7, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r8, 0x0, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000400)={{r10, 0x0, 0x2, [0xb5b5, 0x10]}, {r11, r12, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x7, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {0x0, 0x80000000}], 0x1, 0x0, &(0x7f00000000c0)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, r12, 0x6, [0x8, 0xfffffeff]}, {r13, 0x0, 0x0, [0x5, 0x100]}, 0x0, [0x800, 0x7fffffff]}) syz_open_pts(r0, 0x0) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) request_key(&(0x7f00000011c0)='trusted\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0xfffffffffffffffd) (async) syz_open_dev$media(&(0x7f0000000000), 0xa628b3c, 0x801) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 05:02:15 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async, rerun: 32) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0)=[{}, {0x80000000}], &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r4, &(0x7f00000006c0), &(0x7f0000000640)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r7, 0x0, 0x0) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r8, 0x0, 0x0) (async) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000400)={{r10, 0x0, 0x2, [0xb5b5, 0x10]}, {r11, r12, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async, rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x7, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {0x0, 0x80000000}], 0x1, 0x0, &(0x7f00000000c0)=[{}]}) (rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, r12, 0x6, [0x8, 0xfffffeff]}, {r13, 0x0, 0x0, [0x5, 0x100]}, 0x0, [0x800, 0x7fffffff]}) (async) syz_open_pts(r0, 0x0) 05:02:15 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x1, 0x0, 0x1, 0x7}, 0x7, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x7fffffff, 0x100000001, 0x5, 0x207f}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xd55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:15 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {0x80000000}], 0x7, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000001c0)=[{}], 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000008c0)={r1, &(0x7f0000000800), &(0x7f0000000840)}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) 05:02:15 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="717f351b8c1977b1636fe1c24c4c1753995106921bbce59a6ec3cbb5c2a154a6b7bdb35fdac8ce5f59eeaa03c4", 0x2d) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffd, 0x5, 0x80000001, 0xfffffffe, 0x0, "cf4c11b16ea6bc69a5ff7835ca6360fe63a0b9", 0x0, 0x3958}) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100), 0x80) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x202001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x1, 0x0, 0x1, 0x7}, 0x7, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x7fffffff, 0x100000001, 0x5, 0x207f}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xd55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:15 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {0x80000000}], 0x7, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000001c0)=[{}], 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000008c0)={r1, &(0x7f0000000800), &(0x7f0000000840)}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) 05:02:15 executing program 1: pipe2$watch_queue(&(0x7f0000000100), 0x80) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) r2 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {0x80000000}], 0x7, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000001c0)=[{}], 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000008c0)={r1, &(0x7f0000000800), &(0x7f0000000840)}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) 05:02:15 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0)=[{}, {0x80000000}], &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r4, &(0x7f00000006c0), &(0x7f0000000640)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r7, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r8, 0x0, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000400)={{r10, 0x0, 0x2, [0xb5b5, 0x10]}, {r11, r12, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x7, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {0x0, 0x80000000}], 0x1, 0x0, &(0x7f00000000c0)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, r12, 0x6, [0x8, 0xfffffeff]}, {r13, 0x0, 0x0, [0x5, 0x100]}, 0x0, [0x800, 0x7fffffff]}) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r4, &(0x7f00000006c0), &(0x7f0000000640)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r7, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r8, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000400)={{r10, 0x0, 0x2, [0xb5b5, 0x10]}, {r11, r12, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x7, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, r12, 0x6, [0x8, 0xfffffeff]}, {r13, 0x0, 0x0, [0x5, 0x100]}, 0x0, [0x800, 0x7fffffff]}) (async) syz_open_pts(r0, 0x0) (async) 05:02:15 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:15 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x80000c55, 0x0, 0x40000, 0xa55, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:15 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x80000c55, 0x0, 0x40000, 0xa55, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x80000c55, 0x0, 0x40000, 0xa55, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:16 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:16 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x10001, 0x40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x220c2) 05:02:16 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:16 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x80000c55, 0x0, 0x40000, 0xa55, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000080)) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x80000c55, 0x0, 0x40000, 0xa55, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:16 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 5: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x10001, 0x40) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000100), 0x80) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x20005, "23a4c832e22b0ea969ec472634bf324aaa70da8100", 0x2, 0x7c, 0x2, 0x200, 0x4040000, 0x2}) clock_gettime(0x5, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x2}) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x220c2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0x220c2) (async) 05:02:16 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x20, 0x5, 0x20, 0x20000000009}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1000, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4}) 05:02:16 executing program 5: pipe2$watch_queue(&(0x7f0000000100), 0x80) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x10001, 0x40) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x20005, "23a4c832e22b0ea969ec472634bf324aaa70da8100", 0x2, 0x7c, 0x2, 0x200, 0x4040000, 0x2}) (async, rerun: 32) clock_gettime(0x5, &(0x7f0000000000)) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x2}) 05:02:16 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x220c2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0x220c2) (async) 05:02:16 executing program 5: pipe2$watch_queue(&(0x7f0000000100), 0x80) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x20, 0x5, 0x20, 0x20000000009}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1000, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x20, 0x5, 0x20, 0x20000000009}, 0x48) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1000, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4}) (async) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x6}, @any, 0x8, 0x4, 0x401, 0x0, 0x2, 0x800}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), 0x4) 05:02:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x20005, "23a4c832e22b0ea969ec472634bf324aaa70da8100", 0x2, 0x7c, 0x2, 0x200, 0x4040000, 0x2}) clock_gettime(0x5, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x2}) 05:02:16 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) syz_open_pts(r1, 0xd4980) 05:02:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x20, 0x5, 0x20, 0x20000000009}, 0x48) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1000, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x4}) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x6}, @any, 0x8, 0x4, 0x401, 0x0, 0x2, 0x800}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), 0x4) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x6}, @any, 0x8, 0x4, 0x401, 0x0, 0x2, 0x800}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), 0x4) (async) 05:02:16 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) (async) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) syz_open_pts(r1, 0xd4980) 05:02:16 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0x0, 0x40200, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x6dba, 0x10001}) 05:02:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) 05:02:16 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x6}, @any, 0x8, 0x4, 0x401, 0x0, 0x2, 0x800}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), 0x4) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x6}, @any, 0x8, 0x4, 0x401, 0x0, 0x2, 0x800}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), 0x4) (async) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) (async) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async) syz_open_pts(r1, 0xd4980) 05:02:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:16 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0x0, 0x40200, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x6dba, 0x10001}) 05:02:16 executing program 5: r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) 05:02:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:16 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0x0, 0x40200, 0x4, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x6dba, 0x10001}) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9e) syz_open_pts(r0, 0x101200) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000980)={0x0, 0x1, 0x0, &(0x7f0000000280)=[{}], 0x7, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000780)=[{}], 0xa, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000340)={0x1, 0xf1, "29fee8c4303442cb620b433cb17b50ea236f30e1e52bfbb71407cef152865b9d82db8cabb2ebd7a230b9bf319ddb300d236592472edb918e7e8362dda7e6e3ba74b0890a22efb80ec518b9002e351972e13be7b2be8b9332dcb525b5447dc1e8ec6eab4242cb8b8e963374c91fc207dcb813657d61872d2825fa9234c8701f1b36e7f3b5599810f4a306f15360761674ceeed91e98ba568eea877cd73dcc5f683d0ee4cdb1955f04f87d9502efc17dbb4fd376abf19bff0b693cd36d2821ad716ef27f30d3578156f8f2637aec3faccb905e6dde04028a29619629dff370c0e9f1a1a5b44d4c74b27e78e1aea500200ba2"}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r5}) 05:02:16 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 4: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x24004080) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000000)) (async, rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000980)={0x0, 0x1, 0x0, &(0x7f0000000280)=[{}], 0x7, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000780)=[{}], 0xa, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000340)={0x1, 0xf1, "29fee8c4303442cb620b433cb17b50ea236f30e1e52bfbb71407cef152865b9d82db8cabb2ebd7a230b9bf319ddb300d236592472edb918e7e8362dda7e6e3ba74b0890a22efb80ec518b9002e351972e13be7b2be8b9332dcb525b5447dc1e8ec6eab4242cb8b8e963374c91fc207dcb813657d61872d2825fa9234c8701f1b36e7f3b5599810f4a306f15360761674ceeed91e98ba568eea877cd73dcc5f683d0ee4cdb1955f04f87d9502efc17dbb4fd376abf19bff0b693cd36d2821ad716ef27f30d3578156f8f2637aec3faccb905e6dde04028a29619629dff370c0e9f1a1a5b44d4c74b27e78e1aea500200ba2"}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r5}) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9e) syz_open_pts(r0, 0x101200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9e) (async) syz_open_pts(r0, 0x101200) (async) 05:02:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1000000, 0x10000, 0x2, 0x0, "df4c11316ea6bc69a5637a9fb44df835ca6360"}) 05:02:16 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:16 executing program 4: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x24004080) (async, rerun: 64) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000980)={0x0, 0x1, 0x0, &(0x7f0000000280)=[{}], 0x7, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000780)=[{}], 0xa, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000340)={0x1, 0xf1, "29fee8c4303442cb620b433cb17b50ea236f30e1e52bfbb71407cef152865b9d82db8cabb2ebd7a230b9bf319ddb300d236592472edb918e7e8362dda7e6e3ba74b0890a22efb80ec518b9002e351972e13be7b2be8b9332dcb525b5447dc1e8ec6eab4242cb8b8e963374c91fc207dcb813657d61872d2825fa9234c8701f1b36e7f3b5599810f4a306f15360761674ceeed91e98ba568eea877cd73dcc5f683d0ee4cdb1955f04f87d9502efc17dbb4fd376abf19bff0b693cd36d2821ad716ef27f30d3578156f8f2637aec3faccb905e6dde04028a29619629dff370c0e9f1a1a5b44d4c74b27e78e1aea500200ba2"}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r5}) 05:02:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1000000, 0x10000, 0x2, 0x0, "df4c11316ea6bc69a5637a9fb44df835ca6360"}) 05:02:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9e) (async) syz_open_pts(r0, 0x101200) 05:02:16 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80002da, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:16 executing program 4: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x24004080) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x3) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1000000, 0x10000, 0x2, 0x0, "df4c11316ea6bc69a5637a9fb44df835ca6360"}) 05:02:16 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x1818c1, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200083}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x394, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cbbb347}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52176dee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc837}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3046aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f81723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc421}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x241afb9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c25b985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8e640a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32722964}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x222054cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165d1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e346322}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e7faf8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7851642a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d6b95cc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8e86b4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x386617ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47809df4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd19a737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b34d5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf537}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d91fd}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefeb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4845d030}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5acc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1683}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a6db4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x967e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x103c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x239b807}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa240}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9344}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a15}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6afd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde5a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6fb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46a2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2cf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x223d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x696deaa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14c37f92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb69e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e1c28e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62b9c61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc439}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e023f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330d955c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x472b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x415eec55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bfb397}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x673f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9543e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67b8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b3cddfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16604202}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc511}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x917a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742c4105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x392c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbba0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf36b46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6181ef41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a6748b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd62f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436a18c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92cc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ebc2279}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x61b0c8a456b298bc}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4}, 0x4004861) syz_open_pts(r0, 0x12280) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x1, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:16 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:16 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:16 executing program 4: keyctl$reject(0x13, 0x0, 0x1, 0x8000000000000000, 0xfffffffffffffff9) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x79) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd2) 05:02:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x1818c1, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200083}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x394, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cbbb347}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52176dee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc837}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3046aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f81723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc421}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x241afb9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c25b985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8e640a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32722964}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x222054cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165d1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e346322}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e7faf8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7851642a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d6b95cc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8e86b4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x386617ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47809df4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd19a737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b34d5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf537}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d91fd}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefeb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4845d030}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5acc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1683}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a6db4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x967e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x103c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x239b807}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa240}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9344}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a15}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6afd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde5a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6fb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46a2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2cf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x223d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x696deaa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14c37f92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb69e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e1c28e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62b9c61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc439}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e023f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330d955c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x472b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x415eec55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bfb397}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x673f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9543e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67b8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b3cddfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16604202}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc511}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x917a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742c4105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x392c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbba0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf36b46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6181ef41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a6748b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd62f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436a18c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92cc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ebc2279}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x61b0c8a456b298bc}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4}, 0x4004861) (async) syz_open_pts(r0, 0x12280) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x1, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x1, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:17 executing program 4: keyctl$reject(0x13, 0x0, 0x1, 0x8000000000000000, 0xfffffffffffffff9) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x79) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd2) keyctl$reject(0x13, 0x0, 0x1, 0x8000000000000000, 0xfffffffffffffff9) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x79) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd2) (async) 05:02:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 05:02:17 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:17 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x1818c1, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200083}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x394, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cbbb347}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52176dee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc837}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3046aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f81723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc421}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x241afb9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c25b985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8e640a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32722964}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x222054cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165d1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e346322}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e7faf8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7851642a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d6b95cc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8e86b4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x386617ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47809df4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd19a737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b34d5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf537}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d91fd}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefeb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4845d030}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5acc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1683}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a6db4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x967e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x103c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x239b807}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa240}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9344}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a15}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6afd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde5a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6fb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46a2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2cf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x223d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x696deaa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14c37f92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb69e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e1c28e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62b9c61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc439}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e023f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330d955c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x472b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x415eec55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bfb397}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x673f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9543e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67b8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b3cddfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16604202}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc511}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x917a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742c4105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x392c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbba0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf36b46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6181ef41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a6748b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd62f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436a18c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92cc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ebc2279}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x61b0c8a456b298bc}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4}, 0x4004861) syz_open_pts(r0, 0x12280) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x1818c1, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200083}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x394, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cbbb347}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52176dee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc837}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3046aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f81723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc421}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x241afb9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c25b985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8e640a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32722964}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x222054cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165d1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e346322}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e7faf8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7851642a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d6b95cc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8e86b4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x386617ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47809df4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd19a737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b34d5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf537}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d91fd}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefeb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4845d030}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5acc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1683}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a6db4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x967e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x103c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x239b807}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa240}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9344}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a15}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6afd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde5a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6fb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46a2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2cf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x223d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x696deaa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14c37f92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb69e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e1c28e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62b9c61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc439}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e023f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330d955c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x472b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x415eec55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bfb397}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x673f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9543e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67b8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b3cddfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16604202}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc511}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x917a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742c4105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x392c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbba0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf36b46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6181ef41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a6748b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd62f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436a18c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92cc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ebc2279}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x61b0c8a456b298bc}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4}, 0x4004861) (async) syz_open_pts(r0, 0x12280) (async) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x1, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x800000000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0xfffffffffffffd74, 0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x100000000, 0x200880) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x8001) 05:02:17 executing program 4: keyctl$reject(0x13, 0x0, 0x1, 0x8000000000000000, 0xfffffffffffffff9) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x79) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd2) keyctl$reject(0x13, 0x0, 0x1, 0x8000000000000000, 0xfffffffffffffff9) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x79) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xd2) (async) 05:02:17 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x96a, 0xb05, 0x4055, 0x400, 0x0, "dbb0ee86d460a1ce8f2604c7e332a54a88c166", 0x9, 0x9}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x101, 0x8, 0xff, 0x9c}}) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x800000000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0xfffffffffffffd74, 0x0, 0x0}) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x100000000, 0x200880) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x8001) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc59, 0x240, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563579eb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) 05:02:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:17 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x4, 0xfffffe01, 0x0, 0x9, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x96a, 0xb05, 0x4055, 0x400, 0x0, "dbb0ee86d460a1ce8f2604c7e332a54a88c166", 0x9, 0x9}) (async) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x101, 0x8, 0xff, 0x9c}}) 05:02:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:17 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x1818c1, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200083}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x394, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cbbb347}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52176dee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc837}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3046aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18f81723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc421}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x241afb9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c25b985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8e640a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32722964}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x222054cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165d1e73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e346322}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e7faf8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7851642a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d6b95cc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf8e86b4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x386617ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47809df4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd19a737}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b34d5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf537}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d91fd}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefeb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4845d030}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5acc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1683}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24a6db4c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x967e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x103c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x239b807}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa240}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9344}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a15}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6afd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde5a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6fb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46a2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2cf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x223d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x696deaa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14c37f92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb69e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e1c28e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62b9c61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc439}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e023f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x330d955c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x472b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x415eec55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bfb397}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x673f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9543e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67b8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b3cddfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16604202}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc511}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x917a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742c4105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x392c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbba0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf36b46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6181ef41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a6748b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd62f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436a18c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92cc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ebc2279}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x61b0c8a456b298bc}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4}, 0x4004861) syz_open_pts(r0, 0x12280) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x800000000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0xfffffffffffffd74, 0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x100000000, 0x200880) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x8001) syz_open_dev$media(&(0x7f0000000000), 0x800000000, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0xfffffffffffffd74, 0x0, 0x0}) (async) syz_open_dev$admmidi(&(0x7f0000000040), 0x100000000, 0x200880) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x8001) (async) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc59, 0x240, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563579eb44df835ca6360"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 05:02:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x96a, 0xb05, 0x4055, 0x400, 0x0, "dbb0ee86d460a1ce8f2604c7e332a54a88c166", 0x9, 0x9}) (async) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x101, 0x8, 0xff, 0x9c}}) 05:02:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x4, 0xfffffe01, 0x0, 0x9, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x4, 0xfffffe01, 0x0, 0x9, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:17 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) 05:02:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc59, 0x240, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563579eb44df835ca6360"}) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) 05:02:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) syz_open_pts(r1, 0xd4980) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) 05:02:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x8801) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x80800) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x2}, 0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf698}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) syz_open_pts(r1, 0x0) 05:02:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x4, 0xfffffe01, 0x0, 0x9, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) syz_open_pts(r1, 0xd4980) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) socketpair(0x2e, 0x1, 0x8d3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 05:02:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) (async) 05:02:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x8801) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x80800) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x2}, 0x4) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf698}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) syz_open_pts(r1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x8801) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x80800) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x2}, 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf698}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) syz_open_pts(r1, 0x0) (async) 05:02:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) clock_gettime(0x2, &(0x7f0000000040)) 05:02:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) syz_open_pts(r1, 0xd4980) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) socketpair(0x2e, 0x1, 0x8d3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x302080) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) socketpair(0x2e, 0x1, 0x8d3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 05:02:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) clock_gettime(0x2, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) clock_gettime(0x2, &(0x7f0000000040)) (async) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) socketpair(0x2e, 0x1, 0x8d3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000040)) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) (async) socketpair(0x2e, 0x1, 0x8d3, &(0x7f0000000180)) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) (async) 05:02:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x8801) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x80800) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x2}, 0x4) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf698}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) syz_open_pts(r1, 0x0) 05:02:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 05:02:17 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x302080) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x302080) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) clock_gettime(0x2, &(0x7f0000000040)) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) syz_open_dev$admmidi(&(0x7f0000000040), 0x7, 0x0) 05:02:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) syz_open_pts(r0, 0x101a00) 05:02:17 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x302080) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:17 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563689fbc4df835ca6360", 0x1}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000000c0)) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0xffffffff, 0x5, "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"}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x560) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r2, 0x42880) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c00007c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25040000000600020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7f) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x200080, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000400), 0x4) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) syz_open_dev$admmidi(&(0x7f0000000040), 0x7, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) (async) syz_open_dev$admmidi(&(0x7f0000000040), 0x7, 0x0) (async) 05:02:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 05:02:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) syz_open_pts(r0, 0x0) 05:02:17 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0x336b}) 05:02:17 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563689fbc4df835ca6360", 0x1}) (async) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000000c0)) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0xffffffff, 0x5, "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"}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x560) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) syz_open_pts(r2, 0x42880) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c00007c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25040000000600020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7f) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x200080, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000400), 0x4) 05:02:17 executing program 1: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) 05:02:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) (async) syz_open_dev$admmidi(&(0x7f0000000040), 0x7, 0x0) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async, rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0x336b}) (rerun: 64) 05:02:17 executing program 1: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) 05:02:17 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0x336b}) 05:02:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) (async) syz_open_pts(r0, 0x0) (async) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:18 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563689fbc4df835ca6360", 0x1}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000000c0)) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0xffffffff, 0x5, "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"}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x560) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r2, 0x42880) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c00007c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25040000000600020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7f) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x200080, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000400), 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563689fbc4df835ca6360", 0x1}) (async) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000000c0)) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0xffffffff, 0x5, "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"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x560) (async) pipe2$watch_queue(&(0x7f0000000280), 0x80) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) syz_open_pts(r2, 0x42880) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c00007c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25040000000600020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7f) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x200080, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000400), 0x4) (async) 05:02:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) syz_open_pts(r0, 0x0) 05:02:18 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563689fbc4df835ca6360", 0x1}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000000c0)) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0xffffffff, 0x5, "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"}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x560) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r2, 0x42880) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c00007c", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25040000000600020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7f) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x200080, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000400), 0x4) 05:02:18 executing program 1: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:18 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair(0x11, 0x800, 0xd4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x864}, 0x24004080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) syz_open_pts(r2, 0x0) 05:02:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 05:02:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x101a00) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 05:02:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "030200000000000027e7ff000014ff356a4a60"}) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) (async) 05:02:18 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair(0x11, 0x800, 0xd4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x864}, 0x24004080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) syz_open_pts(r2, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) socketpair(0x11, 0x800, 0xd4, &(0x7f0000000080)) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x864}, 0x24004080) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) (async) syz_open_pts(r2, 0x0) (async) 05:02:18 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 05:02:18 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "030200000000000027e7ff000014ff356a4a60"}) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "030200000000000027e7ff000014ff356a4a60"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "030200000000000027e7ff000014ff356a4a60"}) (async) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) (async) 05:02:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 05:02:18 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) socketpair(0x11, 0x800, 0xd4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x864}, 0x24004080) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) (async) syz_open_pts(r2, 0x0) 05:02:18 executing program 4: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) 05:02:18 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) 05:02:18 executing program 4: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x228, 0x4080) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) socket$packet(0x11, 0x2, 0x300) syz_open_pts(r0, 0x0) 05:02:18 executing program 4: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x228, 0x4080) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000000), 0x228, 0x4080) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:18 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) 05:02:18 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x228, 0x4080) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) syz_open_pts(r0, 0x0) 05:02:18 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) 05:02:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x9, 0x7fffffff, 0x9, 0x2, "52860f4927b2ad18316d4b6023a2611acd7f60", 0x5, 0xe6}) 05:02:18 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1c}]}, 0x68}}, 0x8804) bind$alg(r1, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 05:02:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000000)={0x6000, 0x9c, "c7f88603eb1ee31e2912c59793d18e4cb1be91af64ed2e8b3ab6aa4ed22b311f7dd8a09ac8fb1d0ddee677f912a98dcfe8358b6deac0cd1e63fee7617ad2079958d28958398203634d2f9c7af80d5eeab8e9d16ed8505a95c275f2d8028a916179b502d24ce07d83f26214d1e37c58b42cad3b51e224e935b8eaecbc3c782ef81045f55600d01af9c01c3b4afbb730b9899a062009241e1ea6849163"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_open_pts(r0, 0x0) 05:02:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x9, 0x7fffffff, 0x9, 0x2, "52860f4927b2ad18316d4b6023a2611acd7f60", 0x5, 0xe6}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x9, 0x7fffffff, 0x9, 0x2, "52860f4927b2ad18316d4b6023a2611acd7f60", 0x5, 0xe6}) (async) 05:02:18 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1c}]}, 0x68}}, 0x8804) bind$alg(r1, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 05:02:18 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000000)={0x6000, 0x9c, "c7f88603eb1ee31e2912c59793d18e4cb1be91af64ed2e8b3ab6aa4ed22b311f7dd8a09ac8fb1d0ddee677f912a98dcfe8358b6deac0cd1e63fee7617ad2079958d28958398203634d2f9c7af80d5eeab8e9d16ed8505a95c275f2d8028a916179b502d24ce07d83f26214d1e37c58b42cad3b51e224e935b8eaecbc3c782ef81045f55600d01af9c01c3b4afbb730b9899a062009241e1ea6849163"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000000)={0x6000, 0x9c, "c7f88603eb1ee31e2912c59793d18e4cb1be91af64ed2e8b3ab6aa4ed22b311f7dd8a09ac8fb1d0ddee677f912a98dcfe8358b6deac0cd1e63fee7617ad2079958d28958398203634d2f9c7af80d5eeab8e9d16ed8505a95c275f2d8028a916179b502d24ce07d83f26214d1e37c58b42cad3b51e224e935b8eaecbc3c782ef81045f55600d01af9c01c3b4afbb730b9899a062009241e1ea6849163"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) 05:02:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x9, 0x7fffffff, 0x9, 0x2, "52860f4927b2ad18316d4b6023a2611acd7f60", 0x5, 0xe6}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x9, 0x7fffffff, 0x9, 0x2, "52860f4927b2ad18316d4b6023a2611acd7f60", 0x5, 0xe6}) (async) 05:02:18 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1c}]}, 0x68}}, 0x8804) bind$alg(r1, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1c}]}, 0x68}}, 0x8804) (async) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (async) 05:02:18 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 05:02:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000000)={0x6000, 0x9c, "c7f88603eb1ee31e2912c59793d18e4cb1be91af64ed2e8b3ab6aa4ed22b311f7dd8a09ac8fb1d0ddee677f912a98dcfe8358b6deac0cd1e63fee7617ad2079958d28958398203634d2f9c7af80d5eeab8e9d16ed8505a95c275f2d8028a916179b502d24ce07d83f26214d1e37c58b42cad3b51e224e935b8eaecbc3c782ef81045f55600d01af9c01c3b4afbb730b9899a062009241e1ea6849163"}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) 05:02:18 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x4040000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:02:18 executing program 3: ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x2, {0x1ff, 0x6, 0x4, 0x200}}) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:18 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 05:02:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x4040000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x4040000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) 05:02:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) 05:02:18 executing program 3: ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x2, {0x1ff, 0x6, 0x4, 0x200}}) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:18 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) 05:02:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fee9df25040000000500040000000000050013000000000008000c00000000000500210000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 05:02:18 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 05:02:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x4, 0x4040000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:02:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 32) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fee9df25040000000500040000000000050013000000000008000c00000000000500210000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 05:02:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fee9df25040000000500040000000000050013000000000008000c00000000000500210000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 05:02:18 executing program 3: ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x2, {0x1ff, 0x6, 0x4, 0x200}}) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x2) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5e) syz_open_pts(r0, 0x0) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$reject(0x13, r1, 0x8000, 0x1ff, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r3) keyctl$search(0xa, r2, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, r3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000280)=0x7) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:19 executing program 5: syz_open_dev$admmidi(0x0, 0x2, 0x820101) 05:02:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5e) (async) syz_open_pts(r0, 0x0) 05:02:19 executing program 5: syz_open_dev$admmidi(0x0, 0x2, 0x820101) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fee9df25040000000500040000000000050013000000000008000c00000000000500210000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/99, 0x63) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fee9df25040000000500040000000000050013000000000008000c00000000000500210000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async) 05:02:19 executing program 5: syz_open_dev$admmidi(0x0, 0x2, 0x820101) 05:02:19 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000280)=0x7) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}]}) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000280)=0x7) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) (async) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) (async) keyctl$reject(0x13, r1, 0x8000, 0x1ff, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r3) keyctl$search(0xa, r2, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, r3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:19 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x0, 0x820101) 05:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5e) syz_open_pts(r0, 0x0) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x63f, 0x0, 0xfffffe01, 0x0, 0x6, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x40000, 0x4}) 05:02:19 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x0, 0x820101) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$reject(0x13, r1, 0x8000, 0x1ff, 0xfffffffffffffffe) (async) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r3) keyctl$search(0xa, r2, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, r3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x100}) syz_open_pts(r0, 0x0) 05:02:19 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000280)=0x7) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, &(0x7f0000000000)=[{}], 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}]}) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000280)=0x7) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) (async) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x63f, 0x0, 0xfffffe01, 0x0, 0x6, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x40000, 0x4}) 05:02:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x0, 0x820101) 05:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x100}) (async) syz_open_pts(r0, 0x0) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x63f, 0x0, 0xfffffe01, 0x0, 0x6, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x40000, 0x4}) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4dc000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10400, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x100000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:19 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x0) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xffffff85, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a56378bfb44df835ca6360", 0x28, 0x1}) 05:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x100}) (async) syz_open_pts(r0, 0x0) 05:02:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x820101) 05:02:19 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x0) 05:02:19 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4dc000, 0x0) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r1, 0x0, 0x0) (async, rerun: 32) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10400, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x100000) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xffffff85, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a56378bfb44df835ca6360", 0x28, 0x1}) 05:02:19 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x0) 05:02:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5289) syz_open_pts(r1, 0x20000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xffffff85, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a56378bfb44df835ca6360", 0x28, 0x1}) 05:02:19 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4dc000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10400, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x100000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4dc000, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10400, 0x0) (async) accept4$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x100000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) (async) 05:02:19 executing program 1: syz_open_dev$admmidi(0x0, 0x2, 0x820101) 05:02:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0xffff, 0x2a0442) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) accept4$nfc_llcp(r2, &(0x7f00000005c0), &(0x7f0000000280)=0x60, 0x1000) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f00000002c0)=0xa8) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000006c0)={0x80000000, &(0x7f0000000180)=[{0x80000000}], &(0x7f0000000540)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000440)="4618b4544728e42750e4343bc1eee2f3a40886b244aaff78541f8a711f08f1aa6f9a00e04ca64087413d0d75325a190ef0886e0a652ed45d347270447914a5964cb55122599bcf1d9726d4aae75f76714c11fd0d1e7192de6cff1a862b716aa999242a9a461b025a7b22598488a63e", 0x6f, 0x4000000, &(0x7f00000004c0)={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x20) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000500)=0x6) r7 = syz_open_dev$media(&(0x7f0000000200), 0x3, 0x406000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r8, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000240)={r4, &(0x7f00000001c0), &(0x7f0000000640)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r6, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r9, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000700)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000040), &(0x7f0000000080)}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5289) syz_open_pts(r1, 0x20000) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) 05:02:19 executing program 5: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x0) 05:02:19 executing program 1: syz_open_dev$admmidi(0x0, 0x2, 0x820101) 05:02:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0xffff, 0x2a0442) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) accept4$nfc_llcp(r2, &(0x7f00000005c0), &(0x7f0000000280)=0x60, 0x1000) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f00000002c0)=0xa8) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000006c0)={0x80000000, &(0x7f0000000180)=[{0x80000000}], &(0x7f0000000540)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000440)="4618b4544728e42750e4343bc1eee2f3a40886b244aaff78541f8a711f08f1aa6f9a00e04ca64087413d0d75325a190ef0886e0a652ed45d347270447914a5964cb55122599bcf1d9726d4aae75f76714c11fd0d1e7192de6cff1a862b716aa999242a9a461b025a7b22598488a63e", 0x6f, 0x4000000, &(0x7f00000004c0)={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x20) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000500)=0x6) (async) r7 = syz_open_dev$media(&(0x7f0000000200), 0x3, 0x406000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r8, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000240)={r4, &(0x7f00000001c0), &(0x7f0000000640)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r6, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r9, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000700)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0xa, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x252001, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) sendto$l2tp6(r2, &(0x7f0000000840)="786ac7de372fbed973c8ca5e69391746faef89e9b463f9538e55831232f6e2a9d64b8f5f53a4aedb002313ba3b3a13a5620bd312caf284cbe36c1d194d8b8549d27f92cd6c859db536b67e2b044c3cb70552bc014a04a8bae76675ef1d70f6123ed745e9e8c29400a4168a353e4a9889e01380b72d83676db3018f5db98039635c5405e6e7c31f9e03f300", 0x8b, 0x40c0, 0x0, 0x0) 05:02:19 executing program 1: syz_open_dev$admmidi(0x0, 0x2, 0x820101) 05:02:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x6, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:19 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0xffff, 0x2a0442) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) accept4$nfc_llcp(r2, &(0x7f00000005c0), &(0x7f0000000280)=0x60, 0x1000) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f00000002c0)=0xa8) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000006c0)={0x80000000, &(0x7f0000000180)=[{0x80000000}], &(0x7f0000000540)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000440)="4618b4544728e42750e4343bc1eee2f3a40886b244aaff78541f8a711f08f1aa6f9a00e04ca64087413d0d75325a190ef0886e0a652ed45d347270447914a5964cb55122599bcf1d9726d4aae75f76714c11fd0d1e7192de6cff1a862b716aa999242a9a461b025a7b22598488a63e", 0x6f, 0x4000000, &(0x7f00000004c0)={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x20) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000500)=0x6) r7 = syz_open_dev$media(&(0x7f0000000200), 0x3, 0x406000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r8, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000240)={r4, &(0x7f00000001c0), &(0x7f0000000640)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r6, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r9, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000700)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000040), &(0x7f0000000080)}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5289) syz_open_pts(r1, 0x20000) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) 05:02:19 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000), 0xffff, 0x2a0442) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) accept4$nfc_llcp(r2, &(0x7f00000005c0), &(0x7f0000000280)=0x60, 0x1000) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f00000002c0)=0xa8) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000006c0)={0x80000000, &(0x7f0000000180)=[{0x80000000}], &(0x7f0000000540)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) (async, rerun: 32) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000440)="4618b4544728e42750e4343bc1eee2f3a40886b244aaff78541f8a711f08f1aa6f9a00e04ca64087413d0d75325a190ef0886e0a652ed45d347270447914a5964cb55122599bcf1d9726d4aae75f76714c11fd0d1e7192de6cff1a862b716aa999242a9a461b025a7b22598488a63e", 0x6f, 0x4000000, &(0x7f00000004c0)={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x20) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000500)=0x6) (async) r7 = syz_open_dev$media(&(0x7f0000000200), 0x3, 0x406000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r8, 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000240)={r4, &(0x7f00000001c0), &(0x7f0000000640)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={r6, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r9, r10, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000700)) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x0, 0x820101) 05:02:19 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0xa, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}]}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x252001, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) sendto$l2tp6(r2, &(0x7f0000000840)="786ac7de372fbed973c8ca5e69391746faef89e9b463f9538e55831232f6e2a9d64b8f5f53a4aedb002313ba3b3a13a5620bd312caf284cbe36c1d194d8b8549d27f92cd6c859db536b67e2b044c3cb70552bc014a04a8bae76675ef1d70f6123ed745e9e8c29400a4168a353e4a9889e01380b72d83676db3018f5db98039635c5405e6e7c31f9e03f300", 0x8b, 0x40c0, 0x0, 0x0) 05:02:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) (async, rerun: 64) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x6, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x6, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x5}) r3 = syz_open_pts(r1, 0x200000) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x7, 0x5, 0x9, 0x9, 0x8, "b5c075e3f287337741d736abf2f77315de1363", 0x2, 0x20}) 05:02:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x0, 0x820101) 05:02:19 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0xa, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}]}) (async, rerun: 64) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x252001, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) (async) sendto$l2tp6(r2, &(0x7f0000000840)="786ac7de372fbed973c8ca5e69391746faef89e9b463f9538e55831232f6e2a9d64b8f5f53a4aedb002313ba3b3a13a5620bd312caf284cbe36c1d194d8b8549d27f92cd6c859db536b67e2b044c3cb70552bc014a04a8bae76675ef1d70f6123ed745e9e8c29400a4168a353e4a9889e01380b72d83676db3018f5db98039635c5405e6e7c31f9e03f300", 0x8b, 0x40c0, 0x0, 0x0) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x400) 05:02:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$reject(0x13, r1, 0x8000, 0x1ff, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r3) keyctl$search(0xa, r2, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, r3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x6, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) (async) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x6, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x1, 0x0, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f00000001c0)=[{}]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:19 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x0, 0x820101) 05:02:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x5}) r3 = syz_open_pts(r1, 0x200000) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x7, 0x5, 0x9, 0x9, 0x8, "b5c075e3f287337741d736abf2f77315de1363", 0x2, 0x20}) 05:02:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x400) (rerun: 32) 05:02:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_pts(r0, 0x300) 05:02:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x400) 05:02:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x0) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_pts(r0, 0x300) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) syz_open_pts(r0, 0x300) (async) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x80000000, 0x480000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x0, 0x0, 0x0}) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x5}) (async) r3 = syz_open_pts(r1, 0x200000) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x7, 0x5, 0x9, 0x9, 0x8, "b5c075e3f287337741d736abf2f77315de1363", 0x2, 0x20}) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x400) 05:02:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_pts(r0, 0x300) 05:02:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x0) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x80000000, 0x480000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x80000000, 0x480000) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x0, 0x0, 0x0}) (async) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2a00, 0x0) syz_open_pts(r0, 0x184c1) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_pts(r0, 0x300) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) syz_open_pts(r0, 0x300) (async) 05:02:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) socket$packet(0x11, 0x2, 0x300) syz_open_pts(r0, 0x0) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:20 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x0) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x80000000, 0x480000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x0, 0x0, 0x0}) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2a00, 0x0) syz_open_pts(r0, 0x184c1) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x1451, 0x0, 0xfffffdfe, 0xfffffffa, 0xee, "cf4c35ca646000"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = syz_open_pts(r0, 0x94000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000040)={@hyper, 0x104}) 05:02:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2a00, 0x0) syz_open_pts(r0, 0x184c1) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) socket$packet(0x11, 0x2, 0x300) syz_open_pts(r0, 0x0) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000340)="2ab40f4e30e81611c8a9d4215ee3c9a1cd710d81983b5136b521e5019593a96fc6d7002888a18e64daf5fc3f6f4809527580ec5bc6ee589a4e622884cf50762df04be04bf36168068a5384b0f4c0e9501a341604f3fe8c9370505bee5a90be42d8e0033db200a83f81f9dc3895e3838934090d1fd3ba8fec0c358c199998b4e6a3fe66224cf667f9c2852cbe7137c3439f103dc9d6ee376c9305c81b3dd34800e07cc0a5bd6af0067e81b4a7b85d911b9bae8d02d4bcefaeeb4d2458", 0xbc) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) syz_open_dev$media(&(0x7f0000000080), 0x7fff, 0x40) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x20) syz_open_dev$sndmidi(&(0x7f0000000100), 0x3f, 0x0) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2a00, 0x0) syz_open_pts(r0, 0x184c1) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x1451, 0x0, 0xfffffdfe, 0xfffffffa, 0xee, "cf4c35ca646000"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = syz_open_pts(r0, 0x94000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000040)={@hyper, 0x104}) 05:02:20 executing program 1: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) syz_open_pts(r0, 0x0) 05:02:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) socket$packet(0x11, 0x2, 0x300) syz_open_pts(r0, 0x0) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000340)="2ab40f4e30e81611c8a9d4215ee3c9a1cd710d81983b5136b521e5019593a96fc6d7002888a18e64daf5fc3f6f4809527580ec5bc6ee589a4e622884cf50762df04be04bf36168068a5384b0f4c0e9501a341604f3fe8c9370505bee5a90be42d8e0033db200a83f81f9dc3895e3838934090d1fd3ba8fec0c358c199998b4e6a3fe66224cf667f9c2852cbe7137c3439f103dc9d6ee376c9305c81b3dd34800e07cc0a5bd6af0067e81b4a7b85d911b9bae8d02d4bcefaeeb4d2458", 0xbc) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) syz_open_dev$media(&(0x7f0000000080), 0x7fff, 0x40) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x20) syz_open_dev$sndmidi(&(0x7f0000000100), 0x3f, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000340)="2ab40f4e30e81611c8a9d4215ee3c9a1cd710d81983b5136b521e5019593a96fc6d7002888a18e64daf5fc3f6f4809527580ec5bc6ee589a4e622884cf50762df04be04bf36168068a5384b0f4c0e9501a341604f3fe8c9370505bee5a90be42d8e0033db200a83f81f9dc3895e3838934090d1fd3ba8fec0c358c199998b4e6a3fe66224cf667f9c2852cbe7137c3439f103dc9d6ee376c9305c81b3dd34800e07cc0a5bd6af0067e81b4a7b85d911b9bae8d02d4bcefaeeb4d2458", 0xbc) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) (async) syz_open_dev$media(&(0x7f0000000080), 0x7fff, 0x40) (async) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x20) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x3f, 0x0) (async) 05:02:20 executing program 1: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x1451, 0x0, 0xfffffdfe, 0xfffffffa, 0xee, "cf4c35ca646000"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = syz_open_pts(r0, 0x94000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000040)={@hyper, 0x104}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x1451, 0x0, 0xfffffdfe, 0xfffffffa, 0xee, "cf4c35ca646000"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r0, 0x94000) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000040)={@hyper, 0x104}) (async) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 64) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) (rerun: 64) syz_open_pts(r0, 0x0) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{}, {}, {}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000340)="2ab40f4e30e81611c8a9d4215ee3c9a1cd710d81983b5136b521e5019593a96fc6d7002888a18e64daf5fc3f6f4809527580ec5bc6ee589a4e622884cf50762df04be04bf36168068a5384b0f4c0e9501a341604f3fe8c9370505bee5a90be42d8e0033db200a83f81f9dc3895e3838934090d1fd3ba8fec0c358c199998b4e6a3fe66224cf667f9c2852cbe7137c3439f103dc9d6ee376c9305c81b3dd34800e07cc0a5bd6af0067e81b4a7b85d911b9bae8d02d4bcefaeeb4d2458", 0xbc) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) (async) syz_open_dev$media(&(0x7f0000000080), 0x7fff, 0x40) (async) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x20) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x3f, 0x0) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc57, 0x0, 0x40000, 0x2, 0x0, "cf4c1131ca636000f3ffffff00000400"}) 05:02:20 executing program 1: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) socket$packet(0x11, 0x2, 0x300) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0x0, 0x2}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="4f4300b02ffb4a000a8d0684008987890e090e010887810c8d8801098f"]) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc57, 0x0, 0x40000, 0x2, 0x0, "cf4c1131ca636000f3ffffff00000400"}) 05:02:20 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x602800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000340)={0x7}) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0xff}, @local, 0x1, 0x9, 0x7, 0x4, 0x100, 0x9, 0x1f}) 05:02:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0x0, 0x2}) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="4f4300b02ffb4a000a8d0684008987890e090e010887810c8d8801098f"]) 05:02:20 executing program 1: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc57, 0x0, 0x40000, 0x2, 0x0, "cf4c1131ca636000f3ffffff00000400"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc57, 0x0, 0x40000, 0x2, 0x0, "cf4c1131ca636000f3ffffff00000400"}) (async) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) (async) syz_open_pts(r0, 0x0) 05:02:20 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x602800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000340)={0x7}) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0xff}, @local, 0x1, 0x9, 0x7, 0x4, 0x100, 0x9, 0x1f}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x602800, 0x0) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000340)={0x7}) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0xff}, @local, 0x1, 0x9, 0x7, 0x4, 0x100, 0x9, 0x1f}) (async) 05:02:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0x0, 0x2}) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="4f4300b02ffb4a000a8d0684008987890e090e010887810c8d8801098f"]) 05:02:20 executing program 1: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x0, 0x1ff, 0xfffff973, 0x5, 0x9, "ef5aa614a33aa563d3271f3478fbda1150ecc7", 0x4, 0x40}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20008090}, 0x8040) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf2500000000050007000300880014001f00fc00000000000000000000000000000132c3cf6488d30e5bc1260a136dc73d31cca30bc5583f13c7ac741edcd205a1e891483f182c7bfaba330bdab3d36c4a66cc54b0b122c22ef7d885eeb5e9ac8f5320f7dd2fe785f2536421b85eb7074fde49896923adf58ad813e0366c4a117bd062787856109514ef5119b83a89656aa2e831"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4055) bind$alg(r4, 0x0, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000240)) 05:02:20 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x602800, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000340)={0x7}) (async) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0xff}, @local, 0x1, 0x9, 0x7, 0x4, 0x100, 0x9, 0x1f}) 05:02:20 executing program 1: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x8000) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x0, 0x1ff, 0xfffff973, 0x5, 0x9, "ef5aa614a33aa563d3271f3478fbda1150ecc7", 0x4, 0x40}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20008090}, 0x8040) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf2500000000050007000300880014001f00fc00000000000000000000000000000132c3cf6488d30e5bc1260a136dc73d31cca30bc5583f13c7ac741edcd205a1e891483f182c7bfaba330bdab3d36c4a66cc54b0b122c22ef7d885eeb5e9ac8f5320f7dd2fe785f2536421b85eb7074fde49896923adf58ad813e0366c4a117bd062787856109514ef5119b83a89656aa2e831"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4055) bind$alg(r4, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000240)) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x3f, 0xfff, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {}]}) 05:02:20 executing program 1: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x3f, 0xfff, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x3f, 0xfff, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0x8000) 05:02:20 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {}]}) 05:02:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x0, 0x1ff, 0xfffff973, 0x5, 0x9, "ef5aa614a33aa563d3271f3478fbda1150ecc7", 0x4, 0x40}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20008090}, 0x8040) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf2500000000050007000300880014001f00fc00000000000000000000000000000132c3cf6488d30e5bc1260a136dc73d31cca30bc5583f13c7ac741edcd205a1e891483f182c7bfaba330bdab3d36c4a66cc54b0b122c22ef7d885eeb5e9ac8f5320f7dd2fe785f2536421b85eb7074fde49896923adf58ad813e0366c4a117bd062787856109514ef5119b83a89656aa2e831"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4055) (async) bind$alg(r4, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000240)) 05:02:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x3f, 0xfff, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x8000) 05:02:21 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {}]}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x10, 0x80, 0x10002, 0xff, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x14ee}) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:21 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x99, 0x0, 0x0}) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x10, 0x80, 0x10002, 0xff, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x14ee}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x10, 0x80, 0x10002, 0xff, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x14ee}) (async) 05:02:21 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x95, 0xffff, 0x81, 0x3, 0xffffffc1], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x1}, 0x8, 0x3, 0x1}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1000}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) syz_open_pts(r2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) accept$packet(r3, &(0x7f0000000140), &(0x7f0000000180)=0x14) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x99, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x99, 0x0, 0x0}) (async) 05:02:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xfffffe01, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:21 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x95, 0xffff, 0x81, 0x3, 0xffffffc1], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x1}, 0x8, 0x3, 0x1}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1000}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) syz_open_pts(r2, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) accept$packet(r3, &(0x7f0000000140), &(0x7f0000000180)=0x14) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x10, 0x80, 0x10002, 0xff, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x14ee}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x99, 0x0, 0x0}) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:21 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x95, 0xffff, 0x81, 0x3, 0xffffffc1], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x1}, 0x8, 0x3, 0x1}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1000}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) syz_open_pts(r2, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) accept$packet(r3, &(0x7f0000000140), &(0x7f0000000180)=0x14) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:21 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x260000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x5, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) accept$nfc_llcp(r0, &(0x7f0000000280), &(0x7f0000000080)=0x60) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x10000) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) syz_open_pts(r0, 0x0) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (rerun: 32) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 05:02:21 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x260000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x5, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) accept$nfc_llcp(r0, &(0x7f0000000280), &(0x7f0000000080)=0x60) (async) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x10000) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (rerun: 64) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) (async) syz_open_pts(r0, 0x0) (async) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5ee, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:21 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x260000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x5, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) accept$nfc_llcp(r0, &(0x7f0000000280), &(0x7f0000000080)=0x60) (async) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x10000) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e00017e", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000400)={0x2, 0x9, 0x9, 0x80000001, 0x1, "c4a1c908443e4ddbd59c65fcffdb6b10c89550", 0x7fff, 0x6}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf250110000006001d000000000008000b000100000099330600020000000000080009000300"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x40040) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x4082, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x2, 0x3, 0x3, 0x9883, 0x0, 0x8001, 0x2], 0x7, 0x800}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) (async) syz_open_pts(r0, 0x0) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9d, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:21 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:21 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e00017e", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000400)={0x2, 0x9, 0x9, 0x80000001, 0x1, "c4a1c908443e4ddbd59c65fcffdb6b10c89550", 0x7fff, 0x6}) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf250110000006001d000000000008000b000100000099330600020000000000080009000300"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20000) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x40040) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x4082, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x2, 0x3, 0x3, 0x9883, 0x0, 0x8001, 0x2], 0x7, 0x800}) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf245e00000000000000809fb04ef837ca6360", 0x1, 0x8}) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x400, 0x400, 0x5000000, 0x3, 0x3, "2ddccc298ee0d68718fd1d8923939b1b71e231", 0x9, 0x1cc}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r0, 0x4c6500) 05:02:21 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async, rerun: 64) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4040, 0x0) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf245e00000000000000809fb04ef837ca6360", 0x0, 0x8}) 05:02:21 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e00017e", @ANYRES16=r1, @ANYBLOB="000429bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000400)={0x2, 0x9, 0x9, 0x80000001, 0x1, "c4a1c908443e4ddbd59c65fcffdb6b10c89550", 0x7fff, 0x6}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf250110000006001d000000000008000b000100000099330600020000000000080009000300"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20000) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x40040) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x4082, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x2, 0x3, 0x3, 0x9883, 0x0, 0x8001, 0x2], 0x7, 0x800}) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x96f) syz_open_pts(r1, 0x628302) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4040, 0x0) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x400, 0x400, 0x5000000, 0x3, 0x3, "2ddccc298ee0d68718fd1d8923939b1b71e231", 0x9, 0x1cc}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r0, 0x4c6500) 05:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cf245e00000000000000809fb04ef837ca6360"}) 05:02:21 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000000)) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4040, 0x0) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x96f) syz_open_pts(r1, 0x628302) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x400, 0x400, 0x5000000, 0x3, 0x3, "2ddccc298ee0d68718fd1d8923939b1b71e231", 0x9, 0x1cc}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r0, 0x4c6500) 05:02:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x400, 0x400, 0x5000000, 0x3, 0x3, "2ddccc298ee0d68718fd1d8923939b1b71e231", 0x9, 0x1cc}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r0, 0x4c6500) 05:02:21 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1a) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc52, 0x0, 0x40001, 0x2, 0x20, "cf4c116ea6bc69a563789fb44df835ca636000", 0xfbfffffd, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x1, 0x3ff, 0xdea8, 0x9, 0x1], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x20, 0x8, "6b19f6382b18e13cd1a48119df9f965abe679e", 0x0, 0x2}) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:21 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1a) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1a) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc52, 0x0, 0x40001, 0x2, 0x20, "cf4c116ea6bc69a563789fb44df835ca636000", 0xfbfffffd, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x1, 0x3ff, 0xdea8, 0x9, 0x1], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x20, 0x8, "6b19f6382b18e13cd1a48119df9f965abe679e", 0x0, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc52, 0x0, 0x40001, 0x2, 0x20, "cf4c116ea6bc69a563789fb44df835ca636000", 0xfbfffffd, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x1, 0x3ff, 0xdea8, 0x9, 0x1], 0x6}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x20, 0x8, "6b19f6382b18e13cd1a48119df9f965abe679e", 0x0, 0x2}) (async) 05:02:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x41) 05:02:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) syz_open_pts(r0, 0x0) 05:02:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x96f) syz_open_pts(r1, 0x628302) 05:02:21 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc52, 0x0, 0x40001, 0x2, 0x20, "cf4c116ea6bc69a563789fb44df835ca636000", 0xfbfffffd, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x1, 0x3ff, 0xdea8, 0x9, 0x1], 0x6, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 64) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x20, 0x8, "6b19f6382b18e13cd1a48119df9f965abe679e", 0x0, 0x2}) 05:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) syz_open_pts(r0, 0x0) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1a) (rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) syz_open_pts(r0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0x41) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x7}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffff, 0x410242) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)=0x8) 05:02:22 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x4638, 0x300) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x9, 0xfff, 0x100, 0x0, 0x3f, 0x3, 0x1000]}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x7}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffff, 0x410242) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)=0x8) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x4638, 0x300) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x41) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) (async) syz_open_pts(r0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0x41) (async) 05:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) syz_open_pts(r0, 0x0) 05:02:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x4638, 0x300) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x7}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffff, 0x410242) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000040)=0x8) 05:02:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x9, 0xfff, 0x100, 0x0, 0x3f, 0x3, 0x1000]}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2088c2, 0x0) 05:02:22 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x99, 0x0, 0x0}) 05:02:22 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x3, 0x2, 0x8000, 0x1, 0xfffff8c2}, 0x6, 0x40}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x400800, 0x0) syz_open_pts(r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000000c0)={0x1, 0x1, [0x8, 0x8c2, 0x1f, 0x7ff, 0x3ff, 0x607, 0x18, 0xe34f]}) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x6, 0x2, 0x4}) 05:02:22 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x99, 0x0, 0x0}) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000040), 0x80800) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bind$alg(r3, 0x0, 0x0) 05:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) 05:02:22 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x3, 0x2, 0x8000, 0x1, 0xfffff8c2}, 0x6, 0x40}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x400800, 0x0) syz_open_pts(r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000000c0)={0x1, 0x1, [0x8, 0x8c2, 0x1f, 0x7ff, 0x3ff, 0x607, 0x18, 0xe34f]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x3, 0x2, 0x8000, 0x1, 0xfffff8c2}, 0x6, 0x40}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x400800, 0x0) (async) syz_open_pts(r0, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000000c0)={0x1, 0x1, [0x8, 0x8c2, 0x1f, 0x7ff, 0x3ff, 0x607, 0x18, 0xe34f]}) (async) 05:02:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0x9, 0xfff, 0x100, 0x0, 0x3f, 0x3, 0x1000]}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x6, 0x2, 0x4}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x6, 0x2, 0x4}) (async) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000040), 0x80800) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bind$alg(r3, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) accept4$packet(r2, 0x0, &(0x7f0000000040), 0x80800) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) bind$alg(r3, 0x0, 0x0) (async) 05:02:22 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x99, 0x0, 0x0}) 05:02:22 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x4, 0x6, 0x400, 0x3ff, 0x4, "1c3e949bb571b3a5fd3cfea73c234313aad38c", 0x8000, 0x1f}) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0xea, 0x1, 0xffffff60, 0x9}, 0x10) 05:02:22 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x6, 0x2, 0x4}) 05:02:22 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) accept4$packet(r2, 0x0, &(0x7f0000000040), 0x80800) (async, rerun: 64) bind$alg(r1, 0x0, 0x0) (rerun: 64) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bind$alg(r3, 0x0, 0x0) 05:02:22 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x3, 0x2, 0x8000, 0x1, 0xfffff8c2}, 0x6, 0x40}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x400800, 0x0) syz_open_pts(r0, 0x0) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000000c0)={0x1, 0x1, [0x8, 0x8c2, 0x1f, 0x7ff, 0x3ff, 0x607, 0x18, 0xe34f]}) 05:02:22 executing program 5: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) 05:02:22 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) 05:02:22 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x4, 0x6, 0x400, 0x3ff, 0x4, "1c3e949bb571b3a5fd3cfea73c234313aad38c", 0x8000, 0x1f}) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0xea, 0x1, 0xffffff60, 0x9}, 0x10) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:22 executing program 5: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x0, 0x0, 0x0}) 05:02:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) syz_open_pts(r0, 0x0) 05:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:22 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x4, 0x6, 0x400, 0x3ff, 0x4, "1c3e949bb571b3a5fd3cfea73c234313aad38c", 0x8000, 0x1f}) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0xea, 0x1, 0xffffff60, 0x9}, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x4, 0x6, 0x400, 0x3ff, 0x4, "1c3e949bb571b3a5fd3cfea73c234313aad38c", 0x8000, 0x1f}) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0xea, 0x1, 0xffffff60, 0x9}, 0x10) (async) 05:02:22 executing program 5: syz_open_dev$media(0x0, 0x7, 0x40a40) 05:02:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) syz_open_pts(r0, 0x0) 05:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[{}], 0x0, 0x0, 0x0}) 05:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) 05:02:22 executing program 5: syz_open_dev$media(0x0, 0x7, 0x40a40) 05:02:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000080)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved}) 05:02:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x0) 05:02:22 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r4, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)={r5}) 05:02:22 executing program 5: syz_open_dev$media(0x0, 0x7, 0x40a40) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x2, '\x00', &(0x7f0000000000)=0x2}) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r4, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)={r5}) 05:02:22 executing program 5: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40a40) 05:02:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x1b5002) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000000)=""/41, 0x29) syz_open_pts(r1, 0x40) 05:02:22 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) 05:02:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000080)) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved}) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x2, '\x00', &(0x7f0000000000)=0x2}) 05:02:22 executing program 5: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40a40) 05:02:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x1b5002) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000000)=""/41, 0x29) syz_open_pts(r1, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x1b5002) (async) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) read$watch_queue(r2, &(0x7f0000000000)=""/41, 0x29) (async) syz_open_pts(r1, 0x40) (async) 05:02:22 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r4, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)={r5}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000400)={{r4, 0x0, 0x2, [0xb5b5, 0x10]}, {r5, r6, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000000)={r5}) (async) 05:02:22 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) 05:02:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x2, '\x00', &(0x7f0000000000)=0x2}) 05:02:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000080)) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved}) 05:02:23 executing program 5: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40a40) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x1b5002) (async) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000000)=""/41, 0x29) syz_open_pts(r1, 0x40) 05:02:23 executing program 5: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x0) 05:02:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 05:02:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @vbi={0xe4, 0x1, 0x6, 0x56544943, [0x78d, 0x5b6], [0x100, 0x80000000], 0x108}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 3: write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x3, 0x20, 0x283}, 0x2f) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:23 executing program 2: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x6) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000040)={0x0, 0x8, 0x0, '\x00', &(0x7f0000000000)=0x7}) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x180, 0x40000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0x28}}, 0x40) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 05:02:23 executing program 5: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x0) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) 05:02:23 executing program 3: write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x3, 0x20, 0x283}, 0x2f) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 05:02:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @vbi={0xe4, 0x1, 0x6, 0x56544943, [0x78d, 0x5b6], [0x100, 0x80000000], 0x108}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @vbi={0xe4, 0x1, 0x6, 0x56544943, [0x78d, 0x5b6], [0x100, 0x80000000], 0x108}}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:23 executing program 2: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x6) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 32) bind$alg(r0, 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000040)={0x0, 0x8, 0x0, '\x00', &(0x7f0000000000)=0x7}) (async, rerun: 64) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) (rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000180), 0x180, 0x40000) (async, rerun: 32) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0x28}}, 0x40) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 05:02:23 executing program 5: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x0) 05:02:23 executing program 3: write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x3, 0x20, 0x283}, 0x2f) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 05:02:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 05:02:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @vbi={0xe4, 0x1, 0x6, 0x56544943, [0x78d, 0x5b6], [0x100, 0x80000000], 0x108}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @vbi={0xe4, 0x1, 0x6, 0x56544943, [0x78d, 0x5b6], [0x100, 0x80000000], 0x108}}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) 05:02:23 executing program 2: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x6) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000040)={0x0, 0x8, 0x0, '\x00', &(0x7f0000000000)=0x7}) (async) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x180, 0x40000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0x28}}, 0x40) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 05:02:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000080)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved}) 05:02:23 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:23 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) 05:02:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r4, r5, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r7, 0x0, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000400)={{r9, 0x0, 0x2, [0xb5b5, 0x10]}, {r10, r11, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x4, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000600)={{0x80000000, r5, 0x2, [0x6, 0x219e]}, {r10, 0x0, 0x0, [0x8, 0x20]}, 0x10000000, [0xff, 0x2]}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) 05:02:23 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x4, 0x6, 0x400, 0x3ff, 0x4, "1c3e949bb571b3a5fd3cfea73c234313aad38c", 0x8000, 0x1f}) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0xea, 0x1, 0xffffff60, 0x9}, 0x10) 05:02:23 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x7}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 05:02:23 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) 05:02:23 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 05:02:23 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x7}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x7}) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) (async) 05:02:23 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 05:02:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r4, r5, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) (async, rerun: 32) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 32) bind$alg(r7, 0x0, 0x0) (async, rerun: 64) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000400)={{r9, 0x0, 0x2, [0xb5b5, 0x10]}, {r10, r11, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async, rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x4, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000440)}) (async, rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000600)={{0x80000000, r5, 0x2, [0x6, 0x219e]}, {r10, 0x0, 0x0, [0x8, 0x20]}, 0x10000000, [0xff, 0x2]}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) 05:02:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) 05:02:23 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x7}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 05:02:23 executing program 1: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) 05:02:23 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) 05:02:23 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xc55, 0x2, 0x40000, 0x2, 0x0, "cf4c11316eb6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) 05:02:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r4, r5, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r6, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r7, 0x0, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000400)={{r9, 0x0, 0x2, [0xb5b5, 0x10]}, {r10, r11, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x4, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000440)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000600)={{0x80000000, r5, 0x2, [0x6, 0x219e]}, {r10, 0x0, 0x0, [0x8, 0x20]}, 0x10000000, [0xff, 0x2]}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)={{r3, 0x0, 0x2, [0xb5b5, 0x10]}, {r4, r5, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r6, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r7, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000400)={{r9, 0x0, 0x2, [0xb5b5, 0x10]}, {r10, r11, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x4, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000440)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000600)={{0x80000000, r5, 0x2, [0x6, 0x219e]}, {r10, 0x0, 0x0, [0x8, 0x20]}, 0x10000000, [0xff, 0x2]}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:23 executing program 1: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x40a40) 05:02:23 executing program 3: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:23 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xc55, 0x2, 0x40000, 0x2, 0x0, "cf4c11316eb6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x201801, 0x0) syz_open_pts(r0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x3f, 0x20, 0x9, 0x20, 0x80}, 0x48) 05:02:23 executing program 1: syz_open_dev$media(0x0, 0x7, 0x40a40) 05:02:23 executing program 3: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:23 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xc55, 0x2, 0x40000, 0x2, 0x0, "cf4c11316eb6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 2: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xc55, 0x2, 0x40000, 0x2, 0x0, "cf4c11316eb6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1080, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250100000006001d00ff01000005001200d500000006001a004e914dd30e2100ff0f0000008100000014001f00fe88000000000000000000000000010114002000fe800000000000000000000000000035edb2bc3e2abbadbd01d145827212f4e1a6b3763205ec12921a908efd4c94bd2f4016e7ffc54fe1dcdfda08920d5845f700cd0c11d4c85075f722e16f76fde88f0babfd7e6d662e40828f73c7998dc90c9b6ce89ef794cc989c94ff00fcb6c9b14b07bfe09be73f1cdf1c5ad6d1f4aded1c9b612419bb33a78f4ea8f312e2e314556fd7"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x40080) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffff8, 0x0, 0x2, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$tty20(0xc, 0x4, 0x0) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x201801, 0x0) syz_open_pts(r0, 0x0) (async) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x3f, 0x20, 0x9, 0x20, 0x80}, 0x48) 05:02:23 executing program 1: syz_open_dev$media(0x0, 0x7, 0x40a40) 05:02:23 executing program 3: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) (async) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xffffffff, 0x101, 0x83, 0x2, 0x0, "cf4c0000000000d4000000f45200"}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) 05:02:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1080, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250100000006001d00ff01000005001200d500000006001a004e914dd30e2100ff0f0000008100000014001f00fe88000000000000000000000000010114002000fe800000000000000000000000000035edb2bc3e2abbadbd01d145827212f4e1a6b3763205ec12921a908efd4c94bd2f4016e7ffc54fe1dcdfda08920d5845f700cd0c11d4c85075f722e16f76fde88f0babfd7e6d662e40828f73c7998dc90c9b6ce89ef794cc989c94ff00fcb6c9b14b07bfe09be73f1cdf1c5ad6d1f4aded1c9b612419bb33a78f4ea8f312e2e314556fd7"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x40080) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffff8, 0x0, 0x2, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1080, 0x0) (async) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250100000006001d00ff01000005001200d500000006001a004e914dd30e2100ff0f0000008100000014001f00fe88000000000000000000000000010114002000fe800000000000000000000000000035edb2bc3e2abbadbd01d145827212f4e1a6b3763205ec12921a908efd4c94bd2f4016e7ffc54fe1dcdfda08920d5845f700cd0c11d4c85075f722e16f76fde88f0babfd7e6d662e40828f73c7998dc90c9b6ce89ef794cc989c94ff00fcb6c9b14b07bfe09be73f1cdf1c5ad6d1f4aded1c9b612419bb33a78f4ea8f312e2e314556fd7"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x40080) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffff8, 0x0, 0x2, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x201801, 0x0) syz_open_pts(r0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x3f, 0x20, 0x9, 0x20, 0x80}, 0x48) 05:02:23 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xc55, 0x2, 0x40000, 0x2, 0x0, "cf4c11316eb6bc69a563789fb44df835ca6360"}) 05:02:23 executing program 1: syz_open_dev$media(0x0, 0x7, 0x40a40) 05:02:23 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000000), 0x500, 0x240a02) 05:02:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xffffffff, 0x101, 0x83, 0x2, 0x0, "cf4c0000000000d4000000f45200"}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) 05:02:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1080, 0x0) (rerun: 64) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250100000006001d00ff01000005001200d500000006001a004e914dd30e2100ff0f0000008100000014001f00fe88000000000000000000000000010114002000fe800000000000000000000000000035edb2bc3e2abbadbd01d145827212f4e1a6b3763205ec12921a908efd4c94bd2f4016e7ffc54fe1dcdfda08920d5845f700cd0c11d4c85075f722e16f76fde88f0babfd7e6d662e40828f73c7998dc90c9b6ce89ef794cc989c94ff00fcb6c9b14b07bfe09be73f1cdf1c5ad6d1f4aded1c9b612419bb33a78f4ea8f312e2e314556fd7"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x40080) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffff8, 0x0, 0x2, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x0) 05:02:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) 05:02:23 executing program 1: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40a40) 05:02:23 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) syz_open_dev$media(&(0x7f0000000000), 0x500, 0x240a02) 05:02:23 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0xc55, 0x2, 0x40000, 0x2, 0x0, "cf4c11316eb6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 1: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40a40) 05:02:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xffffffff, 0x101, 0x83, 0x2, 0x0, "cf4c0000000000d4000000f45200"}) (async) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) 05:02:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$l2tp(0x2, 0x2, 0x73) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) syz_open_dev$media(&(0x7f0000000000), 0x500, 0x240a02) 05:02:24 executing program 1: syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40a40) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x50400, 0x0) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xff, 0xf8d3, 0x2df400, 0x8, 0x0, 0x9, 0x6, 0x6, 0x4, 0x5], 0xa, 0x81800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{{0x80000000}}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x1, 0x0, &(0x7f0000000280)=[{}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {0x0, 0x80000000}], 0x4, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r3, r9, 0x5, [0xf8, 0x8]}, {r10, r1, 0x0, [0x6, 0x4]}, 0x0, [0x2, 0x560d4f8f]}) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x7, 0x6d, 0x1, 0x0, 0x10001, 0x9, 0x9e, 0x1, 0x400, 0x878a, 0x19657c61, 0x1f, 0x5, 0x1, 0x0, 0x40, {0xff, 0x4}, 0xfe, 0xae}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x210080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x2, 0x8, 0x64, 0x42, 0xffffffffffffffff, 0xf6cd, '\x00', r1, r2, 0x3, 0x1, 0x5}, 0x48) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000100)={0x100, "ed79766d662214e8cb14c84811eb55dc8dfbff0f05f93850488083b1e36fc7a2", 0x2, 0x9, 0x1, 0xb400, 0x800, 0x8}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x5, 0x5, 0x101, 0x7, 0x101, 0x3abd, 0x7}, 0x1c) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x1}) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x80, 0x6, 0xb4, 0x6, 0x80, "476107d9b88a87d697c26251c3b39b82b6d9b4", 0x0, 0x888}) 05:02:24 executing program 1: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x0) 05:02:24 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) socketpair(0x3, 0xa, 0x5, &(0x7f00000005c0)) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x27, 0x1, 0x1, 0x4, 0x0, 0x0, "d2e11cd00a3e1b657422ebbd23cc091d623e378461766e36cb16f51d6f66d67cab05fdfba1b467571efb738886069acea30be22d700712e558b99fc0883070", 0x12}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000080)="61f4275fc1299dc634dc04184eac2919d1ceebcd2a3424f21e31af953f1deaf49542268be79ff092ae4b71f83c8eb2045639bb4d483cad0e8ed41d5fe3a8b9ded43f99aa62f9e32739934e43585b1ce2030916f1e491af156653a04a2e3229f74fc32fb75b60337f9e5625883b124b985e7fab63c61886f75a8722a806d5", 0x7e}, {&(0x7f0000000140)="2d353a8440f1d20e193ca37a4d51e575ba775f11c6ce7c8f143948e39a095bfc955ca3dde883ee1675e7629444b1f7d520d671359370856edb2608a9ed3eda1e67b96903c805b53fada1a71d351cfa906279841f26e658acde49d449b7914ff0107c44f71dcb868de6dfb9b574fe1035b71e9a4e0383722f", 0x78}, {&(0x7f00000001c0)="be92e2b3e3f8b280cba08c2738fc2efa61e03dd6705989afa71716cf66277d39d2f3591b6466668718171b170ebd67cc54a1ca834d49e3da65766ec1b74d09d2ed41791775f82c6526dccf3643418d831ecbdefb4753ff34d37bf0b977c109a6ede1ef6cdf63aa0c716af8f85202403781690e2004e9fb3cf320e98a9455b831394b3ceec9b1f0df1ce664976088cc2e9cc8f45ec969f67d1a58c6a5880bcaaa7904bc009847e031054b085314eab686a19f0eeb7b03b67fdd41bba818ba8abe6555a7159f84fb9bcd265f94523ed350ee7fb97adac8ec4fdebd92", 0xdb}, {&(0x7f00000002c0)="f078449450b98b5dbf061fc8207aea27a8a0033a08eced52a6e0fcccf8569540cd53cf8a350f15efbcf056a63a0039be6b4972d196897e6b5f8461e77196665362a21d4c9e61a27a77ebeedf9b7746d55d494fc810c8813ae3128d1612bdcc761486c8c7295189e81886e648a3dec8c932628b8c020147e61ffdab3b066c6c3322790ec44940f06eb2c15d714125967cda585317fac13acb30d541955d1629029780556b", 0xa4}, {&(0x7f0000000380)="2b75e2dce3b398d5064df5bfeb50922785ff381ccaf5f36c7ee8b0d756a7c89e63145877fe7fff39d64e220695e7c009ae39c5c3b4616ea7b534e4b9cb975dafaabb12df11c159ff3e42c5d0b0ee06944ae8c1b3531dba1b74e6d92568d931a7100370", 0x63}], 0x5, &(0x7f0000000480)={0xd8, 0x118, 0x1, "7402bcd1cdee44af8f246f8c3a0c96048149f584c880bb0fcc7da3619881810b2feb61f184c72ba9dc5fc61437b0acb4f137d4634d669db14407fa7fd839472ec31cff9612d437485690a9a600e11700d9fe7fda30589da0a4ab2fcafbc6d75e09a882668a6abad35b24a4f1f46e3fe5faf966eb9d37633e689a2d83594b9bba99791e59d87441a74c14b5ad4bac325e28a05249ec5dad6bd391ceeb211fefabed4605da584aa46ae5dfd83a373902c68a54eb2615ec003835f902077cb551ee1b9d97e7d3"}, 0xd8, 0x800}, 0x40880) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x400], 0x2, 0xf19b06c1fd936c29}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xff, 0xf8d3, 0x2df400, 0x8, 0x0, 0x9, 0x6, 0x6, 0x4, 0x5], 0xa, 0x81800, 0x0, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{{0x80000000}}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) (async) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x1, 0x0, &(0x7f0000000280)=[{}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {0x0, 0x80000000}], 0x4, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r3, r9, 0x5, [0xf8, 0x8]}, {r10, r1, 0x0, [0x6, 0x4]}, 0x0, [0x2, 0x560d4f8f]}) 05:02:24 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) socketpair(0x3, 0xa, 0x5, &(0x7f00000005c0)) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x27, 0x1, 0x1, 0x4, 0x0, 0x0, "d2e11cd00a3e1b657422ebbd23cc091d623e378461766e36cb16f51d6f66d67cab05fdfba1b467571efb738886069acea30be22d700712e558b99fc0883070", 0x12}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000080)="61f4275fc1299dc634dc04184eac2919d1ceebcd2a3424f21e31af953f1deaf49542268be79ff092ae4b71f83c8eb2045639bb4d483cad0e8ed41d5fe3a8b9ded43f99aa62f9e32739934e43585b1ce2030916f1e491af156653a04a2e3229f74fc32fb75b60337f9e5625883b124b985e7fab63c61886f75a8722a806d5", 0x7e}, {&(0x7f0000000140)="2d353a8440f1d20e193ca37a4d51e575ba775f11c6ce7c8f143948e39a095bfc955ca3dde883ee1675e7629444b1f7d520d671359370856edb2608a9ed3eda1e67b96903c805b53fada1a71d351cfa906279841f26e658acde49d449b7914ff0107c44f71dcb868de6dfb9b574fe1035b71e9a4e0383722f", 0x78}, {&(0x7f00000001c0)="be92e2b3e3f8b280cba08c2738fc2efa61e03dd6705989afa71716cf66277d39d2f3591b6466668718171b170ebd67cc54a1ca834d49e3da65766ec1b74d09d2ed41791775f82c6526dccf3643418d831ecbdefb4753ff34d37bf0b977c109a6ede1ef6cdf63aa0c716af8f85202403781690e2004e9fb3cf320e98a9455b831394b3ceec9b1f0df1ce664976088cc2e9cc8f45ec969f67d1a58c6a5880bcaaa7904bc009847e031054b085314eab686a19f0eeb7b03b67fdd41bba818ba8abe6555a7159f84fb9bcd265f94523ed350ee7fb97adac8ec4fdebd92", 0xdb}, {&(0x7f00000002c0)="f078449450b98b5dbf061fc8207aea27a8a0033a08eced52a6e0fcccf8569540cd53cf8a350f15efbcf056a63a0039be6b4972d196897e6b5f8461e77196665362a21d4c9e61a27a77ebeedf9b7746d55d494fc810c8813ae3128d1612bdcc761486c8c7295189e81886e648a3dec8c932628b8c020147e61ffdab3b066c6c3322790ec44940f06eb2c15d714125967cda585317fac13acb30d541955d1629029780556b", 0xa4}, {&(0x7f0000000380)="2b75e2dce3b398d5064df5bfeb50922785ff381ccaf5f36c7ee8b0d756a7c89e63145877fe7fff39d64e220695e7c009ae39c5c3b4616ea7b534e4b9cb975dafaabb12df11c159ff3e42c5d0b0ee06944ae8c1b3531dba1b74e6d92568d931a7100370", 0x63}], 0x5, &(0x7f0000000480)={0xd8, 0x118, 0x1, "7402bcd1cdee44af8f246f8c3a0c96048149f584c880bb0fcc7da3619881810b2feb61f184c72ba9dc5fc61437b0acb4f137d4634d669db14407fa7fd839472ec31cff9612d437485690a9a600e11700d9fe7fda30589da0a4ab2fcafbc6d75e09a882668a6abad35b24a4f1f46e3fe5faf966eb9d37633e689a2d83594b9bba99791e59d87441a74c14b5ad4bac325e28a05249ec5dad6bd391ceeb211fefabed4605da584aa46ae5dfd83a373902c68a54eb2615ec003835f902077cb551ee1b9d97e7d3"}, 0xd8, 0x800}, 0x40880) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x400], 0x2, 0xf19b06c1fd936c29}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x7, 0x6d, 0x1, 0x0, 0x10001, 0x9, 0x9e, 0x1, 0x400, 0x878a, 0x19657c61, 0x1f, 0x5, 0x1, 0x0, 0x40, {0xff, 0x4}, 0xfe, 0xae}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x210080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x2, 0x8, 0x64, 0x42, 0xffffffffffffffff, 0xf6cd, '\x00', r1, r2, 0x3, 0x1, 0x5}, 0x48) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000100)={0x100, "ed79766d662214e8cb14c84811eb55dc8dfbff0f05f93850488083b1e36fc7a2", 0x2, 0x9, 0x1, 0xb400, 0x800, 0x8}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x5, 0x5, 0x101, 0x7, 0x101, 0x3abd, 0x7}, 0x1c) (async) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x1}) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x80, 0x6, 0xb4, 0x6, 0x80, "476107d9b88a87d697c26251c3b39b82b6d9b4", 0x0, 0x888}) 05:02:24 executing program 1: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x0) 05:02:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 1: syz_open_dev$media(&(0x7f00000000c0), 0x7, 0x0) 05:02:24 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x20000000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xff, 0xf8d3, 0x2df400, 0x8, 0x0, 0x9, 0x6, 0x6, 0x4, 0x5], 0xa, 0x81800, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)=[{{0x80000000}}]}) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) (async) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000500)={0x0, 0x1, 0x0, &(0x7f0000000280)=[{}], 0x1, 0x0, &(0x7f0000000340)=[{}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {0x0, 0x80000000}], 0x4, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r3, r9, 0x5, [0xf8, 0x8]}, {r10, r1, 0x0, [0x6, 0x4]}, 0x0, [0x2, 0x560d4f8f]}) 05:02:24 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) socketpair(0x3, 0xa, 0x5, &(0x7f00000005c0)) (async) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x27, 0x1, 0x1, 0x4, 0x0, 0x0, "d2e11cd00a3e1b657422ebbd23cc091d623e378461766e36cb16f51d6f66d67cab05fdfba1b467571efb738886069acea30be22d700712e558b99fc0883070", 0x12}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000080)="61f4275fc1299dc634dc04184eac2919d1ceebcd2a3424f21e31af953f1deaf49542268be79ff092ae4b71f83c8eb2045639bb4d483cad0e8ed41d5fe3a8b9ded43f99aa62f9e32739934e43585b1ce2030916f1e491af156653a04a2e3229f74fc32fb75b60337f9e5625883b124b985e7fab63c61886f75a8722a806d5", 0x7e}, {&(0x7f0000000140)="2d353a8440f1d20e193ca37a4d51e575ba775f11c6ce7c8f143948e39a095bfc955ca3dde883ee1675e7629444b1f7d520d671359370856edb2608a9ed3eda1e67b96903c805b53fada1a71d351cfa906279841f26e658acde49d449b7914ff0107c44f71dcb868de6dfb9b574fe1035b71e9a4e0383722f", 0x78}, {&(0x7f00000001c0)="be92e2b3e3f8b280cba08c2738fc2efa61e03dd6705989afa71716cf66277d39d2f3591b6466668718171b170ebd67cc54a1ca834d49e3da65766ec1b74d09d2ed41791775f82c6526dccf3643418d831ecbdefb4753ff34d37bf0b977c109a6ede1ef6cdf63aa0c716af8f85202403781690e2004e9fb3cf320e98a9455b831394b3ceec9b1f0df1ce664976088cc2e9cc8f45ec969f67d1a58c6a5880bcaaa7904bc009847e031054b085314eab686a19f0eeb7b03b67fdd41bba818ba8abe6555a7159f84fb9bcd265f94523ed350ee7fb97adac8ec4fdebd92", 0xdb}, {&(0x7f00000002c0)="f078449450b98b5dbf061fc8207aea27a8a0033a08eced52a6e0fcccf8569540cd53cf8a350f15efbcf056a63a0039be6b4972d196897e6b5f8461e77196665362a21d4c9e61a27a77ebeedf9b7746d55d494fc810c8813ae3128d1612bdcc761486c8c7295189e81886e648a3dec8c932628b8c020147e61ffdab3b066c6c3322790ec44940f06eb2c15d714125967cda585317fac13acb30d541955d1629029780556b", 0xa4}, {&(0x7f0000000380)="2b75e2dce3b398d5064df5bfeb50922785ff381ccaf5f36c7ee8b0d756a7c89e63145877fe7fff39d64e220695e7c009ae39c5c3b4616ea7b534e4b9cb975dafaabb12df11c159ff3e42c5d0b0ee06944ae8c1b3531dba1b74e6d92568d931a7100370", 0x63}], 0x5, &(0x7f0000000480)={0xd8, 0x118, 0x1, "7402bcd1cdee44af8f246f8c3a0c96048149f584c880bb0fcc7da3619881810b2feb61f184c72ba9dc5fc61437b0acb4f137d4634d669db14407fa7fd839472ec31cff9612d437485690a9a600e11700d9fe7fda30589da0a4ab2fcafbc6d75e09a882668a6abad35b24a4f1f46e3fe5faf966eb9d37633e689a2d83594b9bba99791e59d87441a74c14b5ad4bac325e28a05249ec5dad6bd391ceeb211fefabed4605da584aa46ae5dfd83a373902c68a54eb2615ec003835f902077cb551ee1b9d97e7d3"}, 0xd8, 0x800}, 0x40880) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x0, 0x400], 0x2, 0xf19b06c1fd936c29}) (async, rerun: 64) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (rerun: 64) 05:02:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x20000000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x7, 0x6d, 0x1, 0x0, 0x10001, 0x9, 0x9e, 0x1, 0x400, 0x878a, 0x19657c61, 0x1f, 0x5, 0x1, 0x0, 0x40, {0xff, 0x4}, 0xfe, 0xae}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x210080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x2, 0x8, 0x64, 0x42, 0xffffffffffffffff, 0xf6cd, '\x00', r1, r2, 0x3, 0x1, 0x5}, 0x48) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000100)={0x100, "ed79766d662214e8cb14c84811eb55dc8dfbff0f05f93850488083b1e36fc7a2", 0x2, 0x9, 0x1, 0xb400, 0x800, 0x8}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x5, 0x5, 0x101, 0x7, 0x101, 0x3abd, 0x7}, 0x1c) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x1}) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x80, 0x6, 0xb4, 0x6, 0x80, "476107d9b88a87d697c26251c3b39b82b6d9b4", 0x0, 0x888}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x7, 0x6d, 0x1, 0x0, 0x10001, 0x9, 0x9e, 0x1, 0x400, 0x878a, 0x19657c61, 0x1f, 0x5, 0x1, 0x0, 0x40, {0xff, 0x4}, 0xfe, 0xae}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x210080, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x2, 0x8, 0x64, 0x42, 0xffffffffffffffff, 0xf6cd, '\x00', r1, r2, 0x3, 0x1, 0x5}, 0x48) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000100)={0x100, "ed79766d662214e8cb14c84811eb55dc8dfbff0f05f93850488083b1e36fc7a2", 0x2, 0x9, 0x1, 0xb400, 0x800, 0x8}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r4, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x5, 0x5, 0x101, 0x7, 0x101, 0x3abd, 0x7}, 0x1c) (async) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0x1}) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x80, 0x6, 0xb4, 0x6, 0x80, "476107d9b88a87d697c26251c3b39b82b6d9b4", 0x0, 0x888}) (async) 05:02:24 executing program 5: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x733300, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000040)) 05:02:24 executing program 5: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x20000000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x20000000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) (async) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffb, 0xffff0000, 0x31a, 0x800, 0xb5, "db245c94fb1d9857ff694c554996445cd62b93", 0x44c, 0x4}) 05:02:24 executing program 2: ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x801) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_pts(r1, 0x40800) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x733300, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000040)) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffb, 0xffff0000, 0x31a, 0x800, 0xb5, "db245c94fb1d9857ff694c554996445cd62b93", 0x44c, 0x4}) 05:02:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r0) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) keyctl$reject(0x13, 0x0, 0x4, 0x80000000, r1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x8, 0x9, 0x200, 0x1, 0x4, "edec270555538977073e2ed0f8a04aee4742c1", 0x3, 0xffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1010c0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)) 05:02:24 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 2: ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x801) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) syz_open_pts(r1, 0x40800) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x733300, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x733300, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000040)) (async) 05:02:24 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffb, 0xffff0000, 0x31a, 0x800, 0xb5, "db245c94fb1d9857ff694c554996445cd62b93", 0x44c, 0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffb, 0xffff0000, 0x31a, 0x800, 0xb5, "db245c94fb1d9857ff694c554996445cd62b93", 0x44c, 0x4}) (async) 05:02:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r0) (async) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) (async) keyctl$reject(0x13, 0x0, 0x4, 0x80000000, r1) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x8, 0x9, 0x200, 0x1, 0x4, "edec270555538977073e2ed0f8a04aee4742c1", 0x3, 0xffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1010c0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)) 05:02:24 executing program 2: ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x801) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) syz_open_pts(r1, 0x40800) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:24 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:24 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/86, 0x56) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) 05:02:24 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r0) (async) r1 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r1) (async) keyctl$reject(0x13, 0x0, 0x4, 0x80000000, r1) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x8, 0x9, 0x200, 0x1, 0x4, "edec270555538977073e2ed0f8a04aee4742c1", 0x3, 0xffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1010c0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)) 05:02:24 executing program 1: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x3, 0x20, 0x0, "a11eaebd20bf651995cdd256f691356783117f7b5dda7f1975bd3b73584d923671169b1d052df832b6bb41951cb196744ba241ac45a526a8128234f86a0cc2", 0x3}, 0x60) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/86, 0x56) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) 05:02:24 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/86, 0x56) (async, rerun: 32) r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x10000) 05:02:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:24 executing program 1: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) 05:02:24 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{0x0, 0x80000000}, {}], 0x1a, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000000)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x94ab98f, 0x3f, 0x2e, 0x1, 0x20, "7cd003115453ce9094db8b14fc7349c35612db", 0x3, 0xc0}) 05:02:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x10000) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e6574202b706572665f6576e56e74206aae069a5f20a8b402f3581d7d42296c40449aaada5b5354d700017ed5ea7efc3ff6c468537d1b1f5f874484f4b64176df2567e25bfdfe3c01e9fb702b31499901a3ae007864979658142b6092377ccdbf128c455a79b254387fbdd425528f0c87d5acaa0069aa5c06f756615b29ebd76ad98f5043367ca6a453216ee03780b043e2a309cd1164daf6f130fa098e96cec0991d5adfa2e1935f5cd6848b6a05a66d24e88656aabe665d1f8762691fdc929fd06966d2b6101df3abd679554a4e51c28e4a5ccbe2ca67555ebef2b39a801fdebb8a9329cc5872b9581aaddd63a84eaee84da9c50f25e69ffb549ae8df3c1c5779"], 0x11) 05:02:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 05:02:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x10000) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x0) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (async) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{0x0, 0x80000000}, {}], 0x1a, 0x0, 0x0}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000000)={r1}) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x94ab98f, 0x3f, 0x2e, 0x1, 0x20, "7cd003115453ce9094db8b14fc7349c35612db", 0x3, 0xc0}) 05:02:25 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0xffffff7f, 0xff, 0x7, 0x80010, 0x5, 0x1, 0x400, 0x8001, 0xfff], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x8, "18b09d496db7b2e17e719aedcda4f5e77d079be25e8432e0279c8c41cc6a6f2b", 0x2, 0x6d3586f8, 0x2, 0x20, 0x30202, 0x4}) 05:02:25 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000000)) bind$alg(r0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8cd6, 0xff, 0x3, 0xfffffffd, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x3}) 05:02:25 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0xffffff7f, 0xff, 0x7, 0x80010, 0x5, 0x1, 0x400, 0x8001, 0xfff], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x8, "18b09d496db7b2e17e719aedcda4f5e77d079be25e8432e0279c8c41cc6a6f2b", 0x2, 0x6d3586f8, 0x2, 0x20, 0x30202, 0x4}) 05:02:25 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 05:02:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{0x0, 0x80000000}, {}], 0x1a, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000000)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x94ab98f, 0x3f, 0x2e, 0x1, 0x20, "7cd003115453ce9094db8b14fc7349c35612db", 0x3, 0xc0}) 05:02:25 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000000)) bind$alg(r0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8cd6, 0xff, 0x3, 0xfffffffd, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x3}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000000)) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8cd6, 0xff, 0x3, 0xfffffffd, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x3}) (async) 05:02:25 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x5, 0x2, 0x8000, 0xffffffff], 0x5, 0x80800}) syz_open_pts(r0, 0x0) 05:02:25 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0xffffff7f, 0xff, 0x7, 0x80010, 0x5, 0x1, 0x400, 0x8001, 0xfff], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x8, "18b09d496db7b2e17e719aedcda4f5e77d079be25e8432e0279c8c41cc6a6f2b", 0x2, 0x6d3586f8, 0x2, 0x20, 0x30202, 0x4}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0xffffff7f, 0xff, 0x7, 0x80010, 0x5, 0x1, 0x400, 0x8001, 0xfff], 0x9, 0x80000}) (async) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x8, "18b09d496db7b2e17e719aedcda4f5e77d079be25e8432e0279c8c41cc6a6f2b", 0x2, 0x6d3586f8, 0x2, 0x20, 0x30202, 0x4}) (async) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/18, 0x12) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000000)={r1}) 05:02:25 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000000)) bind$alg(r0, 0x0, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x8cd6, 0xff, 0x3, 0xfffffffd, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x3}) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x5, 0x2, 0x8000, 0xffffffff], 0x5, 0x80800}) (async, rerun: 32) syz_open_pts(r0, 0x0) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/18, 0x12) (async) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000000)={r1}) 05:02:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 2: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x1000, 0x5, 0x10000, 0x6, 0x6, 0x4, 0x10100002, 0x7f]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x5, 0x2, 0x8000, 0xffffffff], 0x5, 0x80800}) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x80000001, 0x5, 0x2, 0x8000, 0xffffffff], 0x5, 0x80800}) (async) syz_open_pts(r0, 0x0) (async) 05:02:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x20000, 0xfffffe01, 0xfffffffd, 0x1, "cf4c11316ea6e06996636d9fb44df835ca6360", 0xfffbfffd}) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/18, 0x12) bind$alg(r2, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000000)={r1}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) read$ptp(0xffffffffffffffff, &(0x7f0000000140)=""/18, 0x12) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000000)={r1}) (async) 05:02:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x20000, 0xfffffe01, 0xfffffffd, 0x1, "cf4c11316ea6e06996636d9fb44df835ca6360", 0xfffbfffd}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x20000, 0xfffffe01, 0xfffffffd, 0x1, "cf4c11316ea6e06996636d9fb44df835ca6360", 0xfffbfffd}) (async) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 2: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x1000, 0x5, 0x10000, 0x6, 0x6, 0x4, 0x10100002, 0x7f]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x80000000, 0x8, 0x0, 0x4}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=""/172, 0xac) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x1, {0x100, 0xffff, 0x4, 0x481}}) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)={r5}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) 05:02:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x20000, 0xfffffe01, 0xfffffffd, 0x1, "cf4c11316ea6e06996636d9fb44df835ca6360", 0xfffbfffd}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x20000, 0xfffffe01, 0xfffffffd, 0x1, "cf4c11316ea6e06996636d9fb44df835ca6360", 0xfffbfffd}) (async) 05:02:25 executing program 2: ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x1000, 0x5, 0x10000, 0x6, 0x6, 0x4, 0x10100002, 0x7f]}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x80000000, 0x8, 0x0, 0x4}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=""/172, 0xac) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x1, {0x100, 0xffff, 0x4, 0x481}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x80000000, 0x8, 0x0, 0x4}) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=""/172, 0xac) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x1, {0x100, 0xffff, 0x4, 0x481}}) (async) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)={r5}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)={r5}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) (async) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:25 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x10001, 0x0, 0x80000001, 0xc37b, 0x0, "000000000100000000000000009700", 0x0, 0x80005}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)) bind$alg(r1, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffb7f7f, 0x1, 0x5021, [0x1f, 0x86f7, 0x81, 0xfce, 0x9, 0x100006, 0x5, 0x8]}]}) bind$alg(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xcec40, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x58) 05:02:25 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)={r5}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:25 executing program 2: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000)=""/126, 0x7e) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:25 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x10001, 0x0, 0x80000001, 0xc37b, 0x0, "000000000100000000000000009700", 0x0, 0x80005}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)) bind$alg(r1, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffb7f7f, 0x1, 0x5021, [0x1f, 0x86f7, 0x81, 0xfce, 0x9, 0x100006, 0x5, 0x8]}]}) bind$alg(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xcec40, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x58) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x10001, 0x0, 0x80000001, 0xc37b, 0x0, "000000000100000000000000009700", 0x0, 0x80005}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffb7f7f, 0x1, 0x5021, [0x1f, 0x86f7, 0x81, 0xfce, 0x9, 0x100006, 0x5, 0x8]}]}) (async) bind$alg(r0, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xcec40, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x58) (async) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x80000000, 0x8, 0x0, 0x4}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=""/172, 0xac) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x1, {0x100, 0xffff, 0x4, 0x481}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x80000000, 0x8, 0x0, 0x4}) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=""/172, 0xac) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x1, {0x100, 0xffff, 0x4, 0x481}}) (async) 05:02:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:25 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x10001, 0x0, 0x80000001, 0xc37b, 0x0, "000000000100000000000000009700", 0x0, 0x80005}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)) bind$alg(r1, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffb7f7f, 0x1, 0x5021, [0x1f, 0x86f7, 0x81, 0xfce, 0x9, 0x100006, 0x5, 0x8]}]}) bind$alg(r0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xcec40, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x58) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x10001, 0x0, 0x80000001, 0xc37b, 0x0, "000000000100000000000000009700", 0x0, 0x80005}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffb7f7f, 0x1, 0x5021, [0x1f, 0x86f7, 0x81, 0xfce, 0x9, 0x100006, 0x5, 0x8]}]}) (async) bind$alg(r0, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xcec40, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x58) (async) 05:02:25 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000680)={0xb7, "b6e5339b83aa75d4356bd50bacccc331e55f495e5ea7e751c1244888f0bc7b0f", 0x1, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[0xffffff81, 0x9], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x8000000000001ca, 0x0, &(0x7f0000000100)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x4, [0x101, 0x80]}, {0x80000000, r6, 0x0, [0x80000001, 0x5]}, 0x10000000, [0x5, 0x9b83]}) connect$nfc_llcp(r4, &(0x7f00000005c0)={0x27, 0x1, 0x0, 0x1, 0x20, 0x0, "8a7547d2ca651a26b491958f4fa00973692dde01a5222e2a2310474cedf3888630358438553dc213d31b482331b007e65fabae8e3bd44ec44018dc7ee6fca8", 0x1c}, 0x60) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x10000, 0x4, 0xffff, 0x1, 0x7, 0x401, 0x6], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000580)={0x1, 0x0, 0x0, 0xf, {0x10000, 0x20, 0x7, 0x566}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:25 executing program 2: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000)=""/126, 0x7e) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x4800) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x4, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000640)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x3, {0x9, 0xc75, 0x7}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) 05:02:25 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:25 executing program 2: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000000)=""/126, 0x7e) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:25 executing program 4: setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=0x7fffffff, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) 05:02:25 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) 05:02:25 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000680)={0xb7, "b6e5339b83aa75d4356bd50bacccc331e55f495e5ea7e751c1244888f0bc7b0f", 0x1, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[0xffffff81, 0x9], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x8000000000001ca, 0x0, &(0x7f0000000100)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x4, [0x101, 0x80]}, {0x80000000, r6, 0x0, [0x80000001, 0x5]}, 0x10000000, [0x5, 0x9b83]}) connect$nfc_llcp(r4, &(0x7f00000005c0)={0x27, 0x1, 0x0, 0x1, 0x20, 0x0, "8a7547d2ca651a26b491958f4fa00973692dde01a5222e2a2310474cedf3888630358438553dc213d31b482331b007e65fabae8e3bd44ec44018dc7ee6fca8", 0x1c}, 0x60) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x10000, 0x4, 0xffff, 0x1, 0x7, 0x401, 0x6], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000580)={0x1, 0x0, 0x0, 0xf, {0x10000, 0x20, 0x7, 0x566}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000680)={0xb7, "b6e5339b83aa75d4356bd50bacccc331e55f495e5ea7e751c1244888f0bc7b0f", 0x1, 0x1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[0xffffff81, 0x9], 0x2, 0x80800}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x8000000000001ca, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x4, [0x101, 0x80]}, {0x80000000, r6, 0x0, [0x80000001, 0x5]}, 0x10000000, [0x5, 0x9b83]}) (async) connect$nfc_llcp(r4, &(0x7f00000005c0)={0x27, 0x1, 0x0, 0x1, 0x20, 0x0, "8a7547d2ca651a26b491958f4fa00973692dde01a5222e2a2310474cedf3888630358438553dc213d31b482331b007e65fabae8e3bd44ec44018dc7ee6fca8", 0x1c}, 0x60) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x10000, 0x4, 0xffff, 0x1, 0x7, 0x401, 0x6], 0x7, 0x800}) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000580)={0x1, 0x0, 0x0, 0xf, {0x10000, 0x20, 0x7, 0x566}}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:25 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x4800) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x4, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000640)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x3, {0x9, 0xc75, 0x7}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x4800) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x4, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000640)}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x3, {0x9, 0xc75, 0x7}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) (async) 05:02:26 executing program 2: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="f1df6c56f8b5928405492f2167b19533b1db8edb5ff8619033952fe286ada10abdb6fdf5a571106460780d08be008cb8490314e50f35940bc3e7dd6159b4b370339c7f8c3124ee200d2862ff0dc2245c317c2a62cd48ca9131831e5d5b87f0e2568d987b194b6e1e55dfeafdb8010f98599e915c4b946f0bb5be65abb34faf79f19828458a5639ce4da04de4c2a2c65dda3d195f98ca19b063fd13573f4951235609d9e47f0a7fef0a6072340712d6f62823", 0xb2) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:26 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) 05:02:26 executing program 4: setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=0x7fffffff, 0x4) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) 05:02:26 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x4800) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x4, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000640)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x3, {0x9, 0xc75, 0x7}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x4800) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x4, 0x0, &(0x7f0000000740)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000640)}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x3, {0x9, 0xc75, 0x7}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) (async) 05:02:26 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000680)={0xb7, "b6e5339b83aa75d4356bd50bacccc331e55f495e5ea7e751c1244888f0bc7b0f", 0x1, 0x1}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[0xffffff81, 0x9], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x8000000000001ca, 0x0, &(0x7f0000000100)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, &(0x7f0000000280)}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x4, [0x101, 0x80]}, {0x80000000, r6, 0x0, [0x80000001, 0x5]}, 0x10000000, [0x5, 0x9b83]}) connect$nfc_llcp(r4, &(0x7f00000005c0)={0x27, 0x1, 0x0, 0x1, 0x20, 0x0, "8a7547d2ca651a26b491958f4fa00973692dde01a5222e2a2310474cedf3888630358438553dc213d31b482331b007e65fabae8e3bd44ec44018dc7ee6fca8", 0x1c}, 0x60) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x10000, 0x4, 0xffff, 0x1, 0x7, 0x401, 0x6], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000580)={0x1, 0x0, 0x0, 0xf, {0x10000, 0x20, 0x7, 0x566}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000680)={0xb7, "b6e5339b83aa75d4356bd50bacccc331e55f495e5ea7e751c1244888f0bc7b0f", 0x1, 0x1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000700)={&(0x7f00000006c0)=[0xffffff81, 0x9], 0x2, 0x80800}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x8000000000001ca, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000280)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x4, [0x101, 0x80]}, {0x80000000, r6, 0x0, [0x80000001, 0x5]}, 0x10000000, [0x5, 0x9b83]}) (async) connect$nfc_llcp(r4, &(0x7f00000005c0)={0x27, 0x1, 0x0, 0x1, 0x20, 0x0, "8a7547d2ca651a26b491958f4fa00973692dde01a5222e2a2310474cedf3888630358438553dc213d31b482331b007e65fabae8e3bd44ec44018dc7ee6fca8", 0x1c}, 0x60) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x10000, 0x4, 0xffff, 0x1, 0x7, 0x401, 0x6], 0x7, 0x800}) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000580)={0x1, 0x0, 0x0, 0xf, {0x10000, 0x20, 0x7, 0x566}}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:26 executing program 2: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="f1df6c56f8b5928405492f2167b19533b1db8edb5ff8619033952fe286ada10abdb6fdf5a571106460780d08be008cb8490314e50f35940bc3e7dd6159b4b370339c7f8c3124ee200d2862ff0dc2245c317c2a62cd48ca9131831e5d5b87f0e2568d987b194b6e1e55dfeafdb8010f98599e915c4b946f0bb5be65abb34faf79f19828458a5639ce4da04de4c2a2c65dda3d195f98ca19b063fd13573f4951235609d9e47f0a7fef0a6072340712d6f62823", 0xb2) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:26 executing program 4: setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=0x7fffffff, 0x4) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000)) 05:02:26 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:26 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000013, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x210102, 0x0) syz_open_pts(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 05:02:26 executing program 2: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="f1df6c56f8b5928405492f2167b19533b1db8edb5ff8619033952fe286ada10abdb6fdf5a571106460780d08be008cb8490314e50f35940bc3e7dd6159b4b370339c7f8c3124ee200d2862ff0dc2245c317c2a62cd48ca9131831e5d5b87f0e2568d987b194b6e1e55dfeafdb8010f98599e915c4b946f0bb5be65abb34faf79f19828458a5639ce4da04de4c2a2c65dda3d195f98ca19b063fd13573f4951235609d9e47f0a7fef0a6072340712d6f62823", 0xb2) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x7}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:26 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000013, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x210102, 0x0) syz_open_pts(r0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 05:02:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:26 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1, 0x40000, 0x2, 0x0, "cf4c11316ea6bc6935ca4b6000"}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000013, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20000) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000013, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x7}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x7}) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:26 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:26 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1, 0x40000, 0x2, 0x0, "cf4c11316ea6bc6935ca4b6000"}) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8) 05:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x210102, 0x0) syz_open_pts(r0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0xa, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000a00)=[{}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000b80)=[{{0x80000000}}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) msgget$private(0x0, 0x9) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000040)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000340)={r4}) 05:02:26 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1, 0x40000, 0x2, 0x0, "cf4c11316ea6bc6935ca4b6000"}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0xc55, 0x1, 0x40000, 0x2, 0x0, "cf4c11316ea6bc6935ca4b6000"}) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8) (async) 05:02:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:26 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x7}) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0xa, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000a00)=[{}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000b80)=[{{0x80000000}}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) (async) msgget$private(0x0, 0x9) (async) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000340)={r4}) 05:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 05:02:26 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r2, 0x404040) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e2ddb2d1f85bdce7b5d0984fdc4bbdf52df0de6e8494c3e2e34935fd3d7a8204458553b57e3f1045ee3561c2c8d487f43169cdd655a104884754696003a949b534cc6759d71966e8b10cfa4f9090ab3b286431971a14c3d569437705530f6541bd505ee4c913f221eeb1efbfa8987a778ef6165cad543f73a926209d7ede249550957ce11462566574", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf1b0000000008000c00030000000000140008007665746830000000000000000000000024c281730bc60f69b8344797ceb02131babcc247aa67ff3dac70df72312bb81de14337f4fd72ff647de3db639b963c02117df8ee85c6f67eaa44a4d35af917b104eaa5d213a1661d"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) 05:02:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffb, 0xffff0000, 0x31a, 0x800, 0xb5, "db245c94fb1d9857ff694c554996445cd62b93", 0x44c, 0x4}) 05:02:26 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b00)={0x0, 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0xa, 0x0, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000a00)=[{}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000b80)=[{{0x80000000}}]}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) (async) msgget$private(0x0, 0x9) (async) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000040)}) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000340)={r4}) (rerun: 32) 05:02:26 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x100004, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xd24}) 05:02:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7fffffff, "897fbbf7258d7e97dee8640bbf3c5eda54879caf4a5c3275b3649c5e3a10cb59"}) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0x1}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 05:02:26 executing program 5: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11) 05:02:26 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r2, 0x404040) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e2ddb2d1f85bdce7b5d0984fdc4bbdf52df0de6e8494c3e2e34935fd3d7a8204458553b57e3f1045ee3561c2c8d487f43169cdd655a104884754696003a949b534cc6759d71966e8b10cfa4f9090ab3b286431971a14c3d569437705530f6541bd505ee4c913f221eeb1efbfa8987a778ef6165cad543f73a926209d7ede249550957ce11462566574", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf1b0000000008000c00030000000000140008007665746830000000000000000000000024c281730bc60f69b8344797ceb02131babcc247aa67ff3dac70df72312bb81de14337f4fd72ff647de3db639b963c02117df8ee85c6f67eaa44a4d35af917b104eaa5d213a1661d"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x1}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_pts(r2, 0x404040) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e2ddb2d1f85bdce7b5d0984fdc4bbdf52df0de6e8494c3e2e34935fd3d7a8204458553b57e3f1045ee3561c2c8d487f43169cdd655a104884754696003a949b534cc6759d71966e8b10cfa4f9090ab3b286431971a14c3d569437705530f6541bd505ee4c913f221eeb1efbfa8987a778ef6165cad543f73a926209d7ede249550957ce11462566574", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf1b0000000008000c00030000000000140008007665746830000000000000000000000024c281730bc60f69b8344797ceb02131babcc247aa67ff3dac70df72312bb81de14337f4fd72ff647de3db639b963c02117df8ee85c6f67eaa44a4d35af917b104eaa5d213a1661d"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) (async) 05:02:26 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x100004, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xd24}) 05:02:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7fffffff, "897fbbf7258d7e97dee8640bbf3c5eda54879caf4a5c3275b3649c5e3a10cb59"}) (async) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0x1}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) 05:02:26 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r2, 0x404040) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e2ddb2d1f85bdce7b5d0984fdc4bbdf52df0de6e8494c3e2e34935fd3d7a8204458553b57e3f1045ee3561c2c8d487f43169cdd655a104884754696003a949b534cc6759d71966e8b10cfa4f9090ab3b286431971a14c3d569437705530f6541bd505ee4c913f221eeb1efbfa8987a778ef6165cad543f73a926209d7ede249550957ce11462566574", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf1b0000000008000c00030000000000140008007665746830000000000000000000000024c281730bc60f69b8344797ceb02131babcc247aa67ff3dac70df72312bb81de14337f4fd72ff647de3db639b963c02117df8ee85c6f67eaa44a4d35af917b104eaa5d213a1661d"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) 05:02:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x20000000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000000)) 05:02:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7fffffff, "897fbbf7258d7e97dee8640bbf3c5eda54879caf4a5c3275b3649c5e3a10cb59"}) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0x1}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:26 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x100004, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xd24}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x100004, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0xd24}) (async) 05:02:26 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x1}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r2, 0x404040) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e2ddb2d1f85bdce7b5d0984fdc4bbdf52df0de6e8494c3e2e34935fd3d7a8204458553b57e3f1045ee3561c2c8d487f43169cdd655a104884754696003a949b534cc6759d71966e8b10cfa4f9090ab3b286431971a14c3d569437705530f6541bd505ee4c913f221eeb1efbfa8987a778ef6165cad543f73a926209d7ede249550957ce11462566574", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf1b0000000008000c00030000000000140008007665746830000000000000000000000024c281730bc60f69b8344797ceb02131babcc247aa67ff3dac70df72312bb81de14337f4fd72ff647de3db639b963c02117df8ee85c6f67eaa44a4d35af917b104eaa5d213a1661d"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) 05:02:26 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x3ff, 0x4) socket$packet(0x11, 0x2, 0x300) 05:02:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, 0x4}) 05:02:26 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="717f351b8c1977b1636fe1c24c4c1753995106921bbce59a6ec3cbb5c2a154a6b7bdb35fdac8ce5f59eeaa03c4", 0x2d) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xfffffffd, 0x5, 0x80000001, 0xfffffffe, 0x0, "cf4c11b16ea6bc69a5ff7835ca6360fe63a0b9", 0x0, 0x3958}) 05:02:26 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d602, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x43c902, 0x0) syz_open_pts(r1, 0x0) 05:02:26 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x85, 0x0, 0x6ba}, 0x0, 0x4, 'id1\x00', 'timer0\x00', 0x0, 0x6d0, 0x100000000, 0x5, 0x7}) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b9ef9ce202d6400"], 0x1c) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r1, r2, 0x4, [0x20, 0x2]}, {r1, r3, 0x3, [0x7]}, 0x0, [0x3, 0x3]}) 05:02:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x242002, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x2, 0xae, 0x2, 0x20, 0x4, 0x1, 0x2]}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) 05:02:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, 0x4}) (rerun: 64) 05:02:26 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b9ef9ce202d6400"], 0x1c) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r1, r2, 0x4, [0x20, 0x2]}, {r1, r3, 0x3, [0x7]}, 0x0, [0x3, 0x3]}) 05:02:26 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b9ef9ce202d6400"], 0x1c) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r1, r2, 0x4, [0x20, 0x2]}, {r1, r3, 0x3, [0x7]}, 0x0, [0x3, 0x3]}) 05:02:26 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d602, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x43c902, 0x0) syz_open_pts(r1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d602, 0x0) (async) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x43c902, 0x0) (async) syz_open_pts(r1, 0x0) (async) 05:02:26 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x85, 0x0, 0x6ba}, 0x0, 0x4, 'id1\x00', 'timer0\x00', 0x0, 0x6d0, 0x100000000, 0x5, 0x7}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, 0x4}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x0, 0x4}) (async) 05:02:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x242002, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x2, 0xae, 0x2, 0x20, 0x4, 0x1, 0x2]}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) 05:02:27 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b9ef9ce202d6400"], 0x1c) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040), &(0x7f0000000080)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r1, r2, 0x4, [0x20, 0x2]}, {r1, r3, 0x3, [0x7]}, 0x0, [0x3, 0x3]}) 05:02:27 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x85, 0x0, 0x6ba}, 0x0, 0x4, 'id1\x00', 'timer0\x00', 0x0, 0x6d0, 0x100000000, 0x5, 0x7}) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:27 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 1) 05:02:27 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d602, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x43c902, 0x0) syz_open_pts(r1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x14d602, 0x0) (async) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x43c902, 0x0) (async) syz_open_pts(r1, 0x0) (async) 05:02:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x242002, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x0, 0x0, [0x2, 0xae, 0x2, 0x20, 0x4, 0x1, 0x2]}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x101) 05:02:27 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 05:02:27 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xfffffffffffffdf1, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2, 0x7fffffff, 0x1}) 05:02:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x23e0, 0x31, "c7f5f215272ba4add2d5838ee77980562b769c7cfad0f9760ddf3b2982b2d20e05c584aad694b4d757929f0dcd45f3ebf1"}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}}, 0x4008041) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000180)) 05:02:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x6f9a, 0xc, [{0xa, 0x1}, {0x1, 0x1}, {0xf}, {0xe}, {0xa, 0x1}, {0xf, 0x1}, {0x8}, {}, {0xa, 0x1}, {0xa}, {0x6, 0x1}, {0x7}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) write$cgroup_pressure(r1, &(0x7f0000000100)={'full', 0x20, 0x8001, 0x20, 0x8}, 0x2f) syz_open_pts(r0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0x13c, 0x18, [{0x2, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0x8, 0x1}, {0x2}, {0x3}, {0xf}, {0x4}, {0x5}, {0xb, 0x1}, {0x2}, {0xb, 0x1}, {0x3}, {0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x7}, {0xa, 0x1}, {0xe}, {0x9}, {0xa, 0x1}, {0xc, 0x1}, {0x8}, {0x5, 0x1}]}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x1, @name="ac530f11e57e47be0f063fda2a9e8067131f4eb0330916ddb81e48139865b3dc"}, 0x8, 0x9, 0x3c5}) 05:02:27 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 05:02:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (fail_nth: 1) [ 568.579494] FAULT_INJECTION: forcing a failure. [ 568.579494] name failslab, interval 1, probability 0, space 0, times 0 [ 568.631516] CPU: 0 PID: 25533 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 568.639443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 568.648801] Call Trace: [ 568.651396] dump_stack+0x1b2/0x281 [ 568.655032] should_fail.cold+0x10a/0x149 [ 568.659184] should_failslab+0xd6/0x130 [ 568.663161] __kmalloc+0x2c1/0x400 [ 568.666702] ? tty_write+0x4e0/0x740 [ 568.670420] tty_write+0x4e0/0x740 [ 568.673961] ? aa_path_link+0x3a0/0x3a0 [ 568.677940] ? n_tty_open+0x160/0x160 [ 568.681751] __vfs_write+0xe4/0x630 [ 568.685374] ? tty_compat_ioctl+0x240/0x240 [ 568.689692] ? debug_check_no_obj_freed+0x2c0/0x680 [ 568.694806] ? kernel_read+0x110/0x110 [ 568.698700] ? common_file_perm+0x3ee/0x580 [ 568.703028] ? security_file_permission+0x82/0x1e0 [ 568.707957] ? rw_verify_area+0xe1/0x2a0 [ 568.712019] vfs_write+0x17f/0x4d0 [ 568.715584] SyS_write+0xf2/0x210 [ 568.719038] ? SyS_read+0x210/0x210 [ 568.722664] ? __do_page_fault+0x159/0xad0 [ 568.726900] ? do_syscall_64+0x4c/0x640 [ 568.730871] ? SyS_read+0x210/0x210 [ 568.734498] do_syscall_64+0x1d5/0x640 [ 568.738388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 568.743580] RIP: 0033:0x7f205ef9c669 [ 568.747287] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.755199] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 568.762469] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 [ 568.769868] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 05:02:27 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) 05:02:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x23e0, 0x31, "c7f5f215272ba4add2d5838ee77980562b769c7cfad0f9760ddf3b2982b2d20e05c584aad694b4d757929f0dcd45f3ebf1"}) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}}, 0x4008041) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000180)) 05:02:27 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xfffffffffffffdf1, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2, 0x7fffffff, 0x1}) [ 568.777139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.784409] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 [ 568.838969] FAULT_INJECTION: forcing a failure. [ 568.838969] name failslab, interval 1, probability 0, space 0, times 0 [ 568.855281] CPU: 0 PID: 25563 Comm: syz-executor.1 Not tainted 4.14.294-syzkaller #0 [ 568.863186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 568.872540] Call Trace: [ 568.875136] dump_stack+0x1b2/0x281 [ 568.878766] should_fail.cold+0x10a/0x149 [ 568.882922] should_failslab+0xd6/0x130 [ 568.886900] __kmalloc+0x2c1/0x400 [ 568.890436] ? tty_write+0x4e0/0x740 [ 568.894393] tty_write+0x4e0/0x740 [ 568.897933] ? aa_path_link+0x3a0/0x3a0 [ 568.901903] ? n_tty_open+0x160/0x160 [ 568.905709] __vfs_write+0xe4/0x630 [ 568.909340] ? tty_compat_ioctl+0x240/0x240 [ 568.913662] ? debug_check_no_obj_freed+0x2c0/0x680 [ 568.918680] ? kernel_read+0x110/0x110 [ 568.922570] ? common_file_perm+0x3ee/0x580 [ 568.926897] ? security_file_permission+0x82/0x1e0 [ 568.931944] ? rw_verify_area+0xe1/0x2a0 [ 568.936009] vfs_write+0x17f/0x4d0 05:02:27 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 2) 05:02:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x6f9a, 0xc, [{0xa, 0x1}, {0x1, 0x1}, {0xf}, {0xe}, {0xa, 0x1}, {0xf, 0x1}, {0x8}, {}, {0xa, 0x1}, {0xa}, {0x6, 0x1}, {0x7}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) write$cgroup_pressure(r1, &(0x7f0000000100)={'full', 0x20, 0x8001, 0x20, 0x8}, 0x2f) syz_open_pts(r0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0x13c, 0x18, [{0x2, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0x8, 0x1}, {0x2}, {0x3}, {0xf}, {0x4}, {0x5}, {0xb, 0x1}, {0x2}, {0xb, 0x1}, {0x3}, {0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x7}, {0xa, 0x1}, {0xe}, {0x9}, {0xa, 0x1}, {0xc, 0x1}, {0x8}, {0x5, 0x1}]}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x1, @name="ac530f11e57e47be0f063fda2a9e8067131f4eb0330916ddb81e48139865b3dc"}, 0x8, 0x9, 0x3c5}) 05:02:27 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xfffffffffffffdf1, 0x0, 0x0}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2, 0x7fffffff, 0x1}) [ 568.939558] SyS_write+0xf2/0x210 [ 568.943019] ? SyS_read+0x210/0x210 [ 568.946644] ? __do_page_fault+0x159/0xad0 [ 568.950879] ? do_syscall_64+0x4c/0x640 [ 568.954853] ? SyS_read+0x210/0x210 [ 568.958481] do_syscall_64+0x1d5/0x640 [ 568.962362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 568.967542] RIP: 0033:0x7fd71fe51669 [ 568.971250] RSP: 002b:00007fd71e7c5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.978957] RAX: ffffffffffffffda RBX: 00007fd71ff72f80 RCX: 00007fd71fe51669 05:02:27 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x23e0, 0x31, "c7f5f215272ba4add2d5838ee77980562b769c7cfad0f9760ddf3b2982b2d20e05c584aad694b4d757929f0dcd45f3ebf1"}) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}}, 0x4008041) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000180)) 05:02:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x6f9a, 0xc, [{0xa, 0x1}, {0x1, 0x1}, {0xf}, {0xe}, {0xa, 0x1}, {0xf, 0x1}, {0x8}, {}, {0xa, 0x1}, {0xa}, {0x6, 0x1}, {0x7}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) write$cgroup_pressure(r1, &(0x7f0000000100)={'full', 0x20, 0x8001, 0x20, 0x8}, 0x2f) syz_open_pts(r0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0x13c, 0x18, [{0x2, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0x8, 0x1}, {0x2}, {0x3}, {0xf}, {0x4}, {0x5}, {0xb, 0x1}, {0x2}, {0xb, 0x1}, {0x3}, {0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x7}, {0xa, 0x1}, {0xe}, {0x9}, {0xa, 0x1}, {0xc, 0x1}, {0x8}, {0x5, 0x1}]}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x1, @name="ac530f11e57e47be0f063fda2a9e8067131f4eb0330916ddb81e48139865b3dc"}, 0x8, 0x9, 0x3c5}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x6f9a, 0xc, [{0xa, 0x1}, {0x1, 0x1}, {0xf}, {0xe}, {0xa, 0x1}, {0xf, 0x1}, {0x8}, {}, {0xa, 0x1}, {0xa}, {0x6, 0x1}, {0x7}]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) write$cgroup_pressure(r1, &(0x7f0000000100)={'full', 0x20, 0x8001, 0x20, 0x8}, 0x2f) (async) syz_open_pts(r0, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0x13c, 0x18, [{0x2, 0x1}, {0x8, 0x1}, {0x3, 0x1}, {0x8, 0x1}, {0x2}, {0x3}, {0xf}, {0x4}, {0x5}, {0xb, 0x1}, {0x2}, {0xb, 0x1}, {0x3}, {0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x7}, {0xa, 0x1}, {0xe}, {0x9}, {0xa, 0x1}, {0xc, 0x1}, {0x8}, {0x5, 0x1}]}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x1, @name="ac530f11e57e47be0f063fda2a9e8067131f4eb0330916ddb81e48139865b3dc"}, 0x8, 0x9, 0x3c5}) (async) 05:02:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x20) r2 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r7, r8) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) keyctl$get_persistent(0x16, r9, r4) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:27 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x3f) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x8000002, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x2}) [ 568.986222] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000003 [ 568.993494] RBP: 00007fd71e7c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.000805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.008077] R13: 00007ffc3a9377ff R14: 00007fd71e7c5300 R15: 0000000000022000 [ 569.011696] FAULT_INJECTION: forcing a failure. [ 569.011696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:02:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (fail_nth: 2) 05:02:27 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0xfffffff7, 0x5, 0x8, 0x7f, 0x5], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x101, 0x2, 0x20, 0x1], 0x4, 0x80000}) syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x100) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"63f1b6c02a730ba75310c5ad2b99b2fd41577adcea8881c2bfec2c58fdc68658", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"1199956fcf68e48d03609631286148e2d4aaa3d70b1fde994684cfbf41dcfde1", r4}) [ 569.108496] CPU: 1 PID: 25586 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 569.116413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 569.125765] Call Trace: [ 569.128357] dump_stack+0x1b2/0x281 [ 569.131989] should_fail.cold+0x10a/0x149 [ 569.136144] __alloc_pages_nodemask+0x22c/0x2720 [ 569.140911] ? __wake_up_common_lock+0xcd/0x140 [ 569.145585] ? trace_hardirqs_on+0x10/0x10 [ 569.149821] ? deref_stack_reg+0x124/0x1a0 05:02:27 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x3f) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x8000002, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x2}) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x3f) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x8000002, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x2}) (async) 05:02:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x20) (async) r2 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async) r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r7, r8) (async) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) keyctl$get_persistent(0x16, r9, r4) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:27 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0xfffffff7, 0x5, 0x8, 0x7f, 0x5], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x101, 0x2, 0x20, 0x1], 0x4, 0x80000}) syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x100) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"63f1b6c02a730ba75310c5ad2b99b2fd41577adcea8881c2bfec2c58fdc68658", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"1199956fcf68e48d03609631286148e2d4aaa3d70b1fde994684cfbf41dcfde1", r4}) [ 569.154051] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 569.159935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 569.164792] ? unwind_next_frame+0xe54/0x17d0 [ 569.169295] ? __lock_acquire+0x5fc/0x3f20 [ 569.173533] alloc_pages_current+0x155/0x260 [ 569.177945] ? is_bpf_text_address+0xb8/0x150 [ 569.182440] __pmd_alloc+0x37/0x3f0 [ 569.186067] __handle_mm_fault+0x1398/0x4620 [ 569.190476] ? depot_save_stack+0x10d/0x3f0 [ 569.194850] ? vm_insert_page+0x7c0/0x7c0 [ 569.199007] ? mark_held_locks+0xa6/0xf0 [ 569.203072] handle_mm_fault+0x455/0x9c0 [ 569.207138] __do_page_fault+0x549/0xad0 [ 569.211211] ? spurious_fault+0x640/0x640 [ 569.215358] ? do_page_fault+0x60/0x500 [ 569.219331] page_fault+0x25/0x50 [ 569.222784] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 569.228398] RSP: 0018:ffff8880a029fc58 EFLAGS: 00050202 [ 569.233759] RAX: ffffed1013a6236b RBX: 0000000000000011 RCX: 0000000000000002 [ 569.241023] RDX: 0000000000000001 RSI: 0000000020000200 RDI: ffff88809d311b40 [ 569.248289] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed1013a6236a [ 569.255555] R10: ffff88809d311b50 R11: ffff8880805ca540 R12: 00007ffffffff000 [ 569.262822] R13: ffff88809d311b40 R14: 0000000020000211 R15: 0000000020000200 [ 569.270197] _copy_from_user+0xbe/0x100 [ 569.274180] tty_write+0x3cf/0x740 [ 569.277731] ? n_tty_open+0x160/0x160 [ 569.281551] __vfs_write+0xe4/0x630 [ 569.285174] ? tty_compat_ioctl+0x240/0x240 [ 569.289527] ? debug_check_no_obj_freed+0x2c0/0x680 [ 569.294559] ? kernel_read+0x110/0x110 [ 569.298461] ? common_file_perm+0x3ee/0x580 [ 569.302796] ? security_file_permission+0x82/0x1e0 [ 569.307749] ? rw_verify_area+0xe1/0x2a0 [ 569.311817] vfs_write+0x17f/0x4d0 [ 569.315349] SyS_write+0xf2/0x210 [ 569.318793] ? SyS_read+0x210/0x210 [ 569.322422] ? __do_page_fault+0x159/0xad0 [ 569.326644] ? do_syscall_64+0x4c/0x640 [ 569.330762] ? SyS_read+0x210/0x210 [ 569.334394] do_syscall_64+0x1d5/0x640 [ 569.338274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 569.343456] RIP: 0033:0x7f205ef9c669 [ 569.347149] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:02:27 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 3) 05:02:27 executing program 2: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x3f) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x8000002, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x2}) 05:02:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x20) r2 = request_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)=')+\x00', r0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) (async, rerun: 64) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) (async, rerun: 64) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r7, r8) (async, rerun: 32) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) (rerun: 32) keyctl$get_persistent(0x16, r9, r4) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:27 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0xfffffff7, 0x5, 0x8, 0x7f, 0x5], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x101, 0x2, 0x20, 0x1], 0x4, 0x80000}) (async) syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x100) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"63f1b6c02a730ba75310c5ad2b99b2fd41577adcea8881c2bfec2c58fdc68658", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"1199956fcf68e48d03609631286148e2d4aaa3d70b1fde994684cfbf41dcfde1", r4}) 05:02:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$cgroup_subtree(r0, 0x0, 0x11) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff8, 0x800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x202402, 0x0) getpeername$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x20) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x8000000000000001, 0x93829408f186a5e4) pipe2$watch_queue(&(0x7f00000000c0), 0x80) 05:02:27 executing program 0: syz_open_dev$media(&(0x7f0000000040), 0x3, 0x40041) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x644041) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) [ 569.354842] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 569.362112] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 [ 569.369388] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.376725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.383983] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 05:02:28 executing program 0: syz_open_dev$media(&(0x7f0000000040), 0x3, 0x40041) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x644041) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x3, 0x40041) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x644041) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) 05:02:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x2) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:28 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$cgroup_subtree(r0, 0x0, 0x11) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff8, 0x800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x202402, 0x0) getpeername$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x20) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x4) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x8000000000000001, 0x93829408f186a5e4) pipe2$watch_queue(&(0x7f00000000c0), 0x80) 05:02:28 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@any, 0xc0c4}, @hyper, 0x1, 0xfe, 0x80, 0x7df645f1, 0x8000000000000000, 0x8, 0x8}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40008, 0x1, 0x0, "4e0535ca0060000000005d00"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x1fe, 0x2, 0x83, 0x0, 0xfe, "a5bee3742e337fc62550a264733fa0bf59d1f5", 0x71, 0x256f}) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000140)) 05:02:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x2) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x2) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) [ 569.513327] FAULT_INJECTION: forcing a failure. [ 569.513327] name failslab, interval 1, probability 0, space 0, times 0 [ 569.584957] CPU: 0 PID: 25659 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 569.593187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 569.602555] Call Trace: [ 569.602571] dump_stack+0x1b2/0x281 [ 569.602586] should_fail.cold+0x10a/0x149 [ 569.602600] should_failslab+0xd6/0x130 [ 569.602611] kmem_cache_alloc+0x28e/0x3c0 [ 569.602620] __pmd_alloc+0xaf/0x3f0 [ 569.602631] __handle_mm_fault+0x1398/0x4620 [ 569.602643] ? depot_save_stack+0x10d/0x3f0 [ 569.602650] ? vm_insert_page+0x7c0/0x7c0 [ 569.602670] ? mark_held_locks+0xa6/0xf0 [ 569.602681] handle_mm_fault+0x455/0x9c0 [ 569.602694] __do_page_fault+0x549/0xad0 [ 569.602707] ? spurious_fault+0x640/0x640 [ 569.602718] ? do_page_fault+0x60/0x500 [ 569.602730] page_fault+0x25/0x50 [ 569.602741] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 569.602747] RSP: 0018:ffff8880a267fc58 EFLAGS: 00050202 [ 569.602756] RAX: ffffed101435c1b3 RBX: 0000000000000011 RCX: 0000000000000002 [ 569.602761] RDX: 0000000000000001 RSI: 0000000020000200 RDI: ffff8880a1ae0d80 [ 569.602767] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed101435c1b2 [ 569.602772] R10: ffff8880a1ae0d90 R11: ffff88809af44500 R12: 00007ffffffff000 [ 569.602778] R13: ffff8880a1ae0d80 R14: 0000000020000211 R15: 0000000020000200 [ 569.602800] _copy_from_user+0xbe/0x100 [ 569.602812] tty_write+0x3cf/0x740 [ 569.602822] ? n_tty_open+0x160/0x160 [ 569.602838] __vfs_write+0xe4/0x630 [ 569.602846] ? tty_compat_ioctl+0x240/0x240 [ 569.602855] ? debug_check_no_obj_freed+0x2c0/0x680 [ 569.602864] ? kernel_read+0x110/0x110 [ 569.602878] ? common_file_perm+0x3ee/0x580 [ 569.602894] ? security_file_permission+0x82/0x1e0 [ 569.602905] ? rw_verify_area+0xe1/0x2a0 [ 569.602916] vfs_write+0x17f/0x4d0 [ 569.602928] SyS_write+0xf2/0x210 [ 569.602938] ? SyS_read+0x210/0x210 [ 569.602946] ? __do_page_fault+0x159/0xad0 [ 569.602956] ? do_syscall_64+0x4c/0x640 [ 569.602964] ? SyS_read+0x210/0x210 [ 569.602974] do_syscall_64+0x1d5/0x640 [ 569.602988] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 569.602996] RIP: 0033:0x7f205ef9c669 05:02:28 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 4) 05:02:28 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$cgroup_subtree(r0, 0x0, 0x11) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff8, 0x800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x202402, 0x0) getpeername$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x20) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x4) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x8000000000000001, 0x93829408f186a5e4) pipe2$watch_queue(&(0x7f00000000c0), 0x80) 05:02:28 executing program 0: syz_open_dev$media(&(0x7f0000000040), 0x3, 0x40041) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x644041) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) syz_open_pts(r0, 0x0) 05:02:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x2) (async) r1 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:28 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@any, 0xc0c4}, @hyper, 0x1, 0xfe, 0x80, 0x7df645f1, 0x8000000000000000, 0x8, 0x8}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@any, 0xc0c4}, @hyper, 0x1, 0xfe, 0x80, 0x7df645f1, 0x8000000000000000, 0x8, 0x8}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40008, 0x1, 0x0, "4e0535ca0060000000005d00"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x1fe, 0x2, 0x83, 0x0, 0xfe, "a5bee3742e337fc62550a264733fa0bf59d1f5", 0x71, 0x256f}) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40008, 0x1, 0x0, "4e0535ca0060000000005d00"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x1fe, 0x2, 0x83, 0x0, 0xfe, "a5bee3742e337fc62550a264733fa0bf59d1f5", 0x71, 0x256f}) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000140)) (async) [ 569.603001] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.603010] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 569.603016] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 [ 569.603021] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.603026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.603032] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 05:02:28 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x0, 0x0, 0x0}) 05:02:28 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@any, 0xc0c4}, @hyper, 0x1, 0xfe, 0x80, 0x7df645f1, 0x8000000000000000, 0x8, 0x8}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:28 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40008, 0x1, 0x0, "4e0535ca0060000000005d00"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x1fe, 0x2, 0x83, 0x0, 0xfe, "a5bee3742e337fc62550a264733fa0bf59d1f5", 0x71, 0x256f}) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40008, 0x1, 0x0, "4e0535ca0060000000005d00"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x1fe, 0x2, 0x83, 0x0, 0xfe, "a5bee3742e337fc62550a264733fa0bf59d1f5", 0x71, 0x256f}) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000140)) (async) 05:02:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r1, 0x0, 0x11) [ 569.947688] FAULT_INJECTION: forcing a failure. [ 569.947688] name failslab, interval 1, probability 0, space 0, times 0 [ 570.001474] CPU: 1 PID: 25701 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 570.009393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 570.018791] Call Trace: [ 570.021380] dump_stack+0x1b2/0x281 [ 570.025022] should_fail.cold+0x10a/0x149 [ 570.029352] should_failslab+0xd6/0x130 [ 570.033355] kmem_cache_alloc+0x28e/0x3c0 [ 570.033369] __anon_vma_prepare+0x5d/0x510 [ 570.033382] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 570.046920] ? __lockdep_init_map+0x100/0x560 05:02:28 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x0, 0x0, 0x0}) [ 570.051418] ? prep_transhuge_page+0xa0/0xa0 [ 570.055827] ? _raw_spin_unlock+0x29/0x40 [ 570.059971] ? __pmd_alloc+0x27f/0x3f0 [ 570.063858] __handle_mm_fault+0x2ac4/0x4620 [ 570.068269] ? depot_save_stack+0x10d/0x3f0 [ 570.072587] ? vm_insert_page+0x7c0/0x7c0 [ 570.076797] ? mark_held_locks+0xa6/0xf0 [ 570.080863] handle_mm_fault+0x455/0x9c0 [ 570.084926] __do_page_fault+0x549/0xad0 [ 570.088987] ? spurious_fault+0x640/0x640 [ 570.093134] ? do_page_fault+0x60/0x500 05:02:28 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}], 0x0, 0x0, 0x0}) (async) [ 570.097152] page_fault+0x25/0x50 [ 570.097165] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 570.097170] RSP: 0018:ffff88807c627c58 EFLAGS: 00050202 [ 570.097178] RAX: ffffed10121d01bb RBX: 0000000000000011 RCX: 0000000000000002 [ 570.097183] RDX: 0000000000000001 RSI: 0000000020000200 RDI: ffff888090e80dc0 [ 570.097188] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed10121d01ba [ 570.097194] R10: ffff888090e80dd0 R11: ffff8880ab93e540 R12: 00007ffffffff000 [ 570.097200] R13: ffff888090e80dc0 R14: 0000000020000211 R15: 0000000020000200 [ 570.097225] _copy_from_user+0xbe/0x100 [ 570.097240] tty_write+0x3cf/0x740 [ 570.097250] ? n_tty_open+0x160/0x160 [ 570.097266] __vfs_write+0xe4/0x630 [ 570.097274] ? tty_compat_ioctl+0x240/0x240 [ 570.097282] ? debug_check_no_obj_freed+0x2c0/0x680 [ 570.097292] ? kernel_read+0x110/0x110 [ 570.097304] ? common_file_perm+0x3ee/0x580 [ 570.097320] ? security_file_permission+0x82/0x1e0 [ 570.097331] ? rw_verify_area+0xe1/0x2a0 [ 570.097342] vfs_write+0x17f/0x4d0 [ 570.097354] SyS_write+0xf2/0x210 [ 570.097363] ? SyS_read+0x210/0x210 [ 570.097372] ? __do_page_fault+0x159/0xad0 [ 570.097382] ? do_syscall_64+0x4c/0x640 [ 570.097390] ? SyS_read+0x210/0x210 [ 570.097400] do_syscall_64+0x1d5/0x640 [ 570.097414] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 570.097422] RIP: 0033:0x7f205ef9c669 [ 570.097427] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.097436] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 570.097441] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 [ 570.097447] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 05:02:28 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 5) 05:02:28 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, 0x0}) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) [ 570.097452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.097457] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 [ 570.418042] FAULT_INJECTION: forcing a failure. [ 570.418042] name failslab, interval 1, probability 0, space 0, times 0 [ 570.440603] CPU: 1 PID: 25759 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 570.448515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 570.457870] Call Trace: [ 570.460461] dump_stack+0x1b2/0x281 [ 570.464097] should_fail.cold+0x10a/0x149 [ 570.468249] should_failslab+0xd6/0x130 [ 570.472308] kmem_cache_alloc+0x28e/0x3c0 [ 570.476450] __anon_vma_prepare+0x2ae/0x510 [ 570.480768] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 570.486000] ? __lockdep_init_map+0x100/0x560 [ 570.490501] ? prep_transhuge_page+0xa0/0xa0 [ 570.494899] ? _raw_spin_unlock+0x29/0x40 [ 570.499031] ? __pmd_alloc+0x27f/0x3f0 [ 570.502899] __handle_mm_fault+0x2ac4/0x4620 [ 570.507304] ? depot_save_stack+0x10d/0x3f0 [ 570.511615] ? vm_insert_page+0x7c0/0x7c0 [ 570.515763] ? mark_held_locks+0xa6/0xf0 [ 570.519917] handle_mm_fault+0x455/0x9c0 [ 570.523961] __do_page_fault+0x549/0xad0 [ 570.528024] ? spurious_fault+0x640/0x640 [ 570.532164] ? do_page_fault+0x60/0x500 [ 570.536124] page_fault+0x25/0x50 [ 570.539562] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 570.545250] RSP: 0018:ffff88807ee1fc58 EFLAGS: 00050202 [ 570.550599] RAX: ffffed1014b902d3 RBX: 0000000000000011 RCX: 0000000000000002 [ 570.557874] RDX: 0000000000000001 RSI: 0000000020000200 RDI: ffff8880a5c81680 [ 570.565148] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed1014b902d2 [ 570.572491] R10: ffff8880a5c81690 R11: ffff888090f38480 R12: 00007ffffffff000 [ 570.579743] R13: ffff8880a5c81680 R14: 0000000020000211 R15: 0000000020000200 [ 570.587012] _copy_from_user+0xbe/0x100 [ 570.590981] tty_write+0x3cf/0x740 [ 570.594508] ? n_tty_open+0x160/0x160 [ 570.598317] __vfs_write+0xe4/0x630 [ 570.601958] ? tty_compat_ioctl+0x240/0x240 [ 570.606396] ? debug_check_no_obj_freed+0x2c0/0x680 [ 570.611407] ? kernel_read+0x110/0x110 [ 570.615395] ? common_file_perm+0x3ee/0x580 [ 570.619710] ? security_file_permission+0x82/0x1e0 [ 570.624648] ? rw_verify_area+0xe1/0x2a0 [ 570.628828] vfs_write+0x17f/0x4d0 [ 570.632378] SyS_write+0xf2/0x210 [ 570.635817] ? SyS_read+0x210/0x210 [ 570.639431] ? __do_page_fault+0x159/0xad0 [ 570.643653] ? do_syscall_64+0x4c/0x640 [ 570.647609] ? SyS_read+0x210/0x210 [ 570.651235] do_syscall_64+0x1d5/0x640 [ 570.655117] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 570.660289] RIP: 0033:0x7f205ef9c669 05:02:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r1, 0x10000) 05:02:29 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) write$cgroup_subtree(r1, 0x0, 0x11) 05:02:29 executing program 2: ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:29 executing program 4: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x39) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x80000000, 0x3, 0xfffffe01, 0x4000, 0x0, "cf4c11316ea6bc29a563789fb44df8354a6360", 0xfffffffd}) 05:02:29 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, 0x0}) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) 05:02:29 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 6) [ 570.663984] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.671683] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 570.678954] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 [ 570.686204] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.693453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.700724] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 05:02:29 executing program 2: ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:29 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) write$cgroup_subtree(r1, 0x0, 0x11) 05:02:29 executing program 4: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x39) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x80000000, 0x3, 0xfffffe01, 0x4000, 0x0, "cf4c11316ea6bc29a563789fb44df8354a6360", 0xfffffffd}) 05:02:29 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, 0x0}) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, 0x0}) (async) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) (async) 05:02:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r1, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) syz_open_pts(r1, 0x10000) (async) [ 570.796728] FAULT_INJECTION: forcing a failure. [ 570.796728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 570.854449] CPU: 1 PID: 25773 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 570.862360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 570.871813] Call Trace: [ 570.874405] dump_stack+0x1b2/0x281 [ 570.878049] should_fail.cold+0x10a/0x149 [ 570.882204] __alloc_pages_nodemask+0x22c/0x2720 [ 570.886959] ? SyS_write+0xf2/0x210 [ 570.890584] ? do_syscall_64+0x1d5/0x640 [ 570.894651] ? trace_hardirqs_on+0x10/0x10 [ 570.898888] ? do_syscall_64+0x1d5/0x640 [ 570.902964] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 570.908011] ? trace_hardirqs_on+0x10/0x10 [ 570.912246] ? __wake_up_common_lock+0xcd/0x140 [ 570.916916] ? __anon_vma_prepare+0x281/0x510 [ 570.921421] ? lock_acquire+0x170/0x3f0 [ 570.925393] ? lock_downgrade+0x740/0x740 [ 570.929559] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 570.935013] alloc_pages_current+0x155/0x260 [ 570.939538] pte_alloc_one+0x15/0x100 [ 570.943339] do_huge_pmd_anonymous_page+0x500/0x1700 [ 570.948449] ? __lockdep_init_map+0x100/0x560 [ 570.952955] ? prep_transhuge_page+0xa0/0xa0 [ 570.957360] ? _raw_spin_unlock+0x29/0x40 [ 570.961509] ? __pmd_alloc+0x27f/0x3f0 [ 570.965400] __handle_mm_fault+0x2ac4/0x4620 [ 570.969814] ? depot_save_stack+0x10d/0x3f0 [ 570.974165] ? vm_insert_page+0x7c0/0x7c0 [ 570.978319] ? mark_held_locks+0xa6/0xf0 [ 570.982394] handle_mm_fault+0x455/0x9c0 [ 570.986463] __do_page_fault+0x549/0xad0 [ 570.990531] ? spurious_fault+0x640/0x640 [ 570.994678] ? do_page_fault+0x60/0x500 [ 570.998652] page_fault+0x25/0x50 05:02:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x4, @raw_data="ce093b8acffa7c3339c1aff08465add64fd57f7b924ce211f4334f5f7044137e5b58adcb357d3343f9622a2ef60d9906fe9fd66becc949b80df83d2ed8ca3a90eca0a7f2ad46436183c808cbc4a159d122ca8f32b8e971cc50e5b61c24477df794df486eaef42c2f95b27f3bc2c44110da7eaff08a5ae62204bd982cbf463343565cf4fae704a03eb9a8093b24a8a1a295e7444ed8fad1420457e44b5732506234f24ac540562d4b5c5dc29ec135bd8b710c0e15f875a58ca8d555d387aeadbd1a66ce58624513c2"}) [ 571.002102] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 571.007715] RSP: 0018:ffff8880a3a17c58 EFLAGS: 00050202 [ 571.013080] RAX: ffffed1014220523 RBX: 0000000000000011 RCX: 0000000000000002 [ 571.020357] RDX: 0000000000000001 RSI: 0000000020000200 RDI: ffff8880a1102900 [ 571.028409] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed1014220522 [ 571.035849] R10: ffff8880a1102910 R11: ffff8880abd2c440 R12: 00007ffffffff000 [ 571.043118] R13: ffff8880a1102900 R14: 0000000020000211 R15: 0000000020000200 [ 571.050533] _copy_from_user+0xbe/0x100 05:02:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x4, @raw_data="ce093b8acffa7c3339c1aff08465add64fd57f7b924ce211f4334f5f7044137e5b58adcb357d3343f9622a2ef60d9906fe9fd66becc949b80df83d2ed8ca3a90eca0a7f2ad46436183c808cbc4a159d122ca8f32b8e971cc50e5b61c24477df794df486eaef42c2f95b27f3bc2c44110da7eaff08a5ae62204bd982cbf463343565cf4fae704a03eb9a8093b24a8a1a295e7444ed8fad1420457e44b5732506234f24ac540562d4b5c5dc29ec135bd8b710c0e15f875a58ca8d555d387aeadbd1a66ce58624513c2"}) [ 571.054510] tty_write+0x3cf/0x740 [ 571.058050] ? n_tty_open+0x160/0x160 [ 571.061859] __vfs_write+0xe4/0x630 [ 571.065488] ? tty_compat_ioctl+0x240/0x240 [ 571.069833] ? debug_check_no_obj_freed+0x2c0/0x680 [ 571.074859] ? kernel_read+0x110/0x110 [ 571.078924] ? common_file_perm+0x3ee/0x580 [ 571.083255] ? security_file_permission+0x82/0x1e0 [ 571.088199] ? rw_verify_area+0xe1/0x2a0 [ 571.092259] vfs_write+0x17f/0x4d0 [ 571.095799] SyS_write+0xf2/0x210 [ 571.099254] ? SyS_read+0x210/0x210 05:02:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x4, @raw_data="ce093b8acffa7c3339c1aff08465add64fd57f7b924ce211f4334f5f7044137e5b58adcb357d3343f9622a2ef60d9906fe9fd66becc949b80df83d2ed8ca3a90eca0a7f2ad46436183c808cbc4a159d122ca8f32b8e971cc50e5b61c24477df794df486eaef42c2f95b27f3bc2c44110da7eaff08a5ae62204bd982cbf463343565cf4fae704a03eb9a8093b24a8a1a295e7444ed8fad1420457e44b5732506234f24ac540562d4b5c5dc29ec135bd8b710c0e15f875a58ca8d555d387aeadbd1a66ce58624513c2"}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(r0, 0x0, 0x11) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) (async) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x4, @raw_data="ce093b8acffa7c3339c1aff08465add64fd57f7b924ce211f4334f5f7044137e5b58adcb357d3343f9622a2ef60d9906fe9fd66becc949b80df83d2ed8ca3a90eca0a7f2ad46436183c808cbc4a159d122ca8f32b8e971cc50e5b61c24477df794df486eaef42c2f95b27f3bc2c44110da7eaff08a5ae62204bd982cbf463343565cf4fae704a03eb9a8093b24a8a1a295e7444ed8fad1420457e44b5732506234f24ac540562d4b5c5dc29ec135bd8b710c0e15f875a58ca8d555d387aeadbd1a66ce58624513c2"}) (async) [ 571.102884] ? __do_page_fault+0x159/0xad0 [ 571.107121] ? do_syscall_64+0x4c/0x640 [ 571.111096] ? SyS_read+0x210/0x210 [ 571.114724] do_syscall_64+0x1d5/0x640 [ 571.118618] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.123801] RIP: 0033:0x7f205ef9c669 [ 571.127513] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.135217] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 571.142486] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 05:02:29 executing program 4: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x39) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x80000000, 0x3, 0xfffffe01, 0x4000, 0x0, "cf4c11316ea6bc29a563789fb44df8354a6360", 0xfffffffd}) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x39) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x80000000, 0x3, 0xfffffe01, 0x4000, 0x0, "cf4c11316ea6bc29a563789fb44df8354a6360", 0xfffffffd}) (async) 05:02:29 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x7f, 0xfd, "273cedc636cb9b2bd7575d8e8e2214f903faadc9cf48553983306d7dc4028078625ed499e3d874777a17e0eff2afa390c0e556dfe6e96508f2e4624c3b96ad", 0x12}, 0x60, &(0x7f0000000500), 0x5, &(0x7f0000000580)={0xf0, 0x107, 0x6, "7a7dc84f0279546aaa3d62df2d9be59b23cde215313f3b43f525295575da6cfdb316f415324d656d93cf17a0c2ccd86394315815a136c07698e41175128c47d9f8ad66a3bff0806d7061a17e077a8c04e06c34ad71b0dd74205a3d82bd67436fe951dd7168f0d334c43c13d8c8cf0c80cfc73ff9bad27f44c49c2bbd5859a1660a242a96e467d13aab3d78e018626d4e593c4757dac904947fc8bf3bdcb0d97efb9d0aa7b2fbcbf5fab160f3cb1de13c8e742b875fb2cf4f2698127e73ab"}, 0xd0, 0x1}, 0x24044045) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="fdaedf8cd43540e4", 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{r6, 0x0, 0x2, [0xb5b5, 0x10]}, {r7, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000480)={r7}) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 05:02:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r1, 0x10000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) syz_open_pts(r1, 0x10000) (async) [ 571.149770] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.157047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.164310] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 05:02:29 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 7) 05:02:29 executing program 2: ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5, 0x2}, 0x20) write$cgroup_subtree(r0, 0x0, 0x11) accept4$alg(r1, 0x0, 0x0, 0x800) 05:02:29 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(cbc-aes-ce,sha512-neon)\x00'}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x9, 0x4, 0x3f, 0x200, 0x3, 0x4, 0x81, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000240)={r1}) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x859, 0x20, 0x1c00000000000}, 0x2f) syz_open_pts(r0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) 05:02:29 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69c163789fb44df835ca6360", 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfdd5, 0x1000, 0x3, 0xfffffff9, 0x4, 0x8, 0x6, 0x6723, 0x8, 0x9], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) syz_open_pts(r1, 0x0) 05:02:29 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x7f, 0xfd, "273cedc636cb9b2bd7575d8e8e2214f903faadc9cf48553983306d7dc4028078625ed499e3d874777a17e0eff2afa390c0e556dfe6e96508f2e4624c3b96ad", 0x12}, 0x60, &(0x7f0000000500), 0x5, &(0x7f0000000580)={0xf0, 0x107, 0x6, "7a7dc84f0279546aaa3d62df2d9be59b23cde215313f3b43f525295575da6cfdb316f415324d656d93cf17a0c2ccd86394315815a136c07698e41175128c47d9f8ad66a3bff0806d7061a17e077a8c04e06c34ad71b0dd74205a3d82bd67436fe951dd7168f0d334c43c13d8c8cf0c80cfc73ff9bad27f44c49c2bbd5859a1660a242a96e467d13aab3d78e018626d4e593c4757dac904947fc8bf3bdcb0d97efb9d0aa7b2fbcbf5fab160f3cb1de13c8e742b875fb2cf4f2698127e73ab"}, 0xd0, 0x1}, 0x24044045) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="fdaedf8cd43540e4", 0x8) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r4, 0x0, 0x0) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{r6, 0x0, 0x2, [0xb5b5, 0x10]}, {r7, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000480)={r7}) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 05:02:29 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffff870f, 0x5], 0x2, 0x800}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x3fffe, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5, 0x2}, 0x20) write$cgroup_subtree(r0, 0x0, 0x11) accept4$alg(r1, 0x0, 0x0, 0x800) [ 571.278308] FAULT_INJECTION: forcing a failure. [ 571.278308] name failslab, interval 1, probability 0, space 0, times 0 05:02:29 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(cbc-aes-ce,sha512-neon)\x00'}, 0x58) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x9, 0x4, 0x3f, 0x200, 0x3, 0x4, 0x81, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000240)={r1}) (async) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x859, 0x20, 0x1c00000000000}, 0x2f) (async) syz_open_pts(r0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r4) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) [ 571.362201] CPU: 1 PID: 25839 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 571.370119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 571.379479] Call Trace: [ 571.382068] dump_stack+0x1b2/0x281 [ 571.385703] should_fail.cold+0x10a/0x149 [ 571.389865] should_failslab+0xd6/0x130 [ 571.393842] kmem_cache_alloc+0x28e/0x3c0 [ 571.397990] ptlock_alloc+0x1d/0x70 [ 571.401615] pte_alloc_one+0x57/0x100 [ 571.405419] do_huge_pmd_anonymous_page+0x500/0x1700 [ 571.410527] ? __lockdep_init_map+0x100/0x560 [ 571.415023] ? prep_transhuge_page+0xa0/0xa0 [ 571.419427] ? _raw_spin_unlock+0x29/0x40 [ 571.423571] ? __pmd_alloc+0x27f/0x3f0 [ 571.427455] __handle_mm_fault+0x2ac4/0x4620 [ 571.431861] ? depot_save_stack+0x10d/0x3f0 [ 571.436181] ? vm_insert_page+0x7c0/0x7c0 [ 571.440335] ? mark_held_locks+0xa6/0xf0 [ 571.444410] handle_mm_fault+0x455/0x9c0 [ 571.448482] __do_page_fault+0x549/0xad0 [ 571.452546] ? spurious_fault+0x640/0x640 [ 571.456691] ? do_page_fault+0x60/0x500 05:02:29 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x7f, 0xfd, "273cedc636cb9b2bd7575d8e8e2214f903faadc9cf48553983306d7dc4028078625ed499e3d874777a17e0eff2afa390c0e556dfe6e96508f2e4624c3b96ad", 0x12}, 0x60, &(0x7f0000000500), 0x5, &(0x7f0000000580)={0xf0, 0x107, 0x6, "7a7dc84f0279546aaa3d62df2d9be59b23cde215313f3b43f525295575da6cfdb316f415324d656d93cf17a0c2ccd86394315815a136c07698e41175128c47d9f8ad66a3bff0806d7061a17e077a8c04e06c34ad71b0dd74205a3d82bd67436fe951dd7168f0d334c43c13d8c8cf0c80cfc73ff9bad27f44c49c2bbd5859a1660a242a96e467d13aab3d78e018626d4e593c4757dac904947fc8bf3bdcb0d97efb9d0aa7b2fbcbf5fab160f3cb1de13c8e742b875fb2cf4f2698127e73ab"}, 0xd0, 0x1}, 0x24044045) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="fdaedf8cd43540e4", 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{r6, 0x0, 0x2, [0xb5b5, 0x10]}, {r7, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000480)={r7}) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x7f, 0xfd, "273cedc636cb9b2bd7575d8e8e2214f903faadc9cf48553983306d7dc4028078625ed499e3d874777a17e0eff2afa390c0e556dfe6e96508f2e4624c3b96ad", 0x12}, 0x60, &(0x7f0000000500), 0x5, &(0x7f0000000580)={0xf0, 0x107, 0x6, "7a7dc84f0279546aaa3d62df2d9be59b23cde215313f3b43f525295575da6cfdb316f415324d656d93cf17a0c2ccd86394315815a136c07698e41175128c47d9f8ad66a3bff0806d7061a17e077a8c04e06c34ad71b0dd74205a3d82bd67436fe951dd7168f0d334c43c13d8c8cf0c80cfc73ff9bad27f44c49c2bbd5859a1660a242a96e467d13aab3d78e018626d4e593c4757dac904947fc8bf3bdcb0d97efb9d0aa7b2fbcbf5fab160f3cb1de13c8e742b875fb2cf4f2698127e73ab"}, 0xd0, 0x1}, 0x24044045) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="fdaedf8cd43540e4", 0x8) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r4, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{r6, 0x0, 0x2, [0xb5b5, 0x10]}, {r7, r8, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000480)={r7}) (async) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) (async) 05:02:30 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0xb, 0x488f40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000100), &(0x7f0000000280)}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)="f649bb05cee01c74ec7570e7aef4f36778eec3037e7f9ce64cecee4b928162a2b188b59b6c2ba9e9f6e095575c30e0fd486e8e4d3f667a22406d67b94def720d43000125822735abb35a0fa3ef7688d8abd4096890c056e9e8679e64c52bf96addcc8385a88cdab995f7176dd04a42277561e21d2d8c2eb2206c3437a9b36d254506df382b2a84e4814355488d0a6c75031692ede701188ef94c8985d487da10f303baca6d0829abb8b4a813abad571796d8600a1798cfcb0f821a83a62ebdfb5ac9d52576bb34988e4c2f935633db0daef7407a9ae3d6bae51b13c937de1f4940bc", 0xe2) [ 571.460666] page_fault+0x25/0x50 [ 571.464118] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 571.469730] RSP: 0018:ffff88809b09fc58 EFLAGS: 00050202 [ 571.475090] RAX: ffffed10142201bb RBX: 0000000000000011 RCX: 0000000000000002 [ 571.482356] RDX: 0000000000000001 RSI: 0000000020000200 RDI: ffff8880a1100dc0 [ 571.489628] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed10142201ba [ 571.496895] R10: ffff8880a1100dd0 R11: ffff88807bc66200 R12: 00007ffffffff000 [ 571.504158] R13: ffff8880a1100dc0 R14: 0000000020000211 R15: 0000000020000200 [ 571.511448] _copy_from_user+0xbe/0x100 [ 571.515431] tty_write+0x3cf/0x740 [ 571.518973] ? n_tty_open+0x160/0x160 [ 571.522781] __vfs_write+0xe4/0x630 [ 571.526405] ? tty_compat_ioctl+0x240/0x240 [ 571.530725] ? debug_check_no_obj_freed+0x2c0/0x680 [ 571.535741] ? kernel_read+0x110/0x110 [ 571.539631] ? common_file_perm+0x3ee/0x580 [ 571.543964] ? security_file_permission+0x82/0x1e0 [ 571.548898] ? rw_verify_area+0xe1/0x2a0 [ 571.552971] vfs_write+0x17f/0x4d0 [ 571.556513] SyS_write+0xf2/0x210 05:02:30 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0xb, 0x488f40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000100), &(0x7f0000000280)}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)="f649bb05cee01c74ec7570e7aef4f36778eec3037e7f9ce64cecee4b928162a2b188b59b6c2ba9e9f6e095575c30e0fd486e8e4d3f667a22406d67b94def720d43000125822735abb35a0fa3ef7688d8abd4096890c056e9e8679e64c52bf96addcc8385a88cdab995f7176dd04a42277561e21d2d8c2eb2206c3437a9b36d254506df382b2a84e4814355488d0a6c75031692ede701188ef94c8985d487da10f303baca6d0829abb8b4a813abad571796d8600a1798cfcb0f821a83a62ebdfb5ac9d52576bb34988e4c2f935633db0daef7407a9ae3d6bae51b13c937de1f4940bc", 0xe2) syz_open_dev$media(&(0x7f0000000300), 0xb, 0x488f40) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000100), &(0x7f0000000280)}) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)="f649bb05cee01c74ec7570e7aef4f36778eec3037e7f9ce64cecee4b928162a2b188b59b6c2ba9e9f6e095575c30e0fd486e8e4d3f667a22406d67b94def720d43000125822735abb35a0fa3ef7688d8abd4096890c056e9e8679e64c52bf96addcc8385a88cdab995f7176dd04a42277561e21d2d8c2eb2206c3437a9b36d254506df382b2a84e4814355488d0a6c75031692ede701188ef94c8985d487da10f303baca6d0829abb8b4a813abad571796d8600a1798cfcb0f821a83a62ebdfb5ac9d52576bb34988e4c2f935633db0daef7407a9ae3d6bae51b13c937de1f4940bc", 0xe2) (async) [ 571.559965] ? SyS_read+0x210/0x210 [ 571.563590] ? __do_page_fault+0x159/0xad0 [ 571.567823] ? do_syscall_64+0x4c/0x640 [ 571.571796] ? SyS_read+0x210/0x210 [ 571.575420] do_syscall_64+0x1d5/0x640 [ 571.579312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.584609] RIP: 0033:0x7f205ef9c669 [ 571.588310] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.596016] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 571.603280] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 05:02:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (fail_nth: 8) 05:02:30 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0xb, 0x488f40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r5, 0x0, 0x2, [0xb5b5, 0x10]}, {r6, r7, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000100), &(0x7f0000000280)}) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)="f649bb05cee01c74ec7570e7aef4f36778eec3037e7f9ce64cecee4b928162a2b188b59b6c2ba9e9f6e095575c30e0fd486e8e4d3f667a22406d67b94def720d43000125822735abb35a0fa3ef7688d8abd4096890c056e9e8679e64c52bf96addcc8385a88cdab995f7176dd04a42277561e21d2d8c2eb2206c3437a9b36d254506df382b2a84e4814355488d0a6c75031692ede701188ef94c8985d487da10f303baca6d0829abb8b4a813abad571796d8600a1798cfcb0f821a83a62ebdfb5ac9d52576bb34988e4c2f935633db0daef7407a9ae3d6bae51b13c937de1f4940bc", 0xe2) 05:02:30 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffff870f, 0x5], 0x2, 0x800}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x3fffe, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffff870f, 0x5], 0x2, 0x800}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x3fffe, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:30 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(cbc-aes-ce,sha512-neon)\x00'}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x9, 0x4, 0x3f, 0x200, 0x3, 0x4, 0x81, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000240)={r1}) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x859, 0x20, 0x1c00000000000}, 0x2f) syz_open_pts(r0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(cbc-aes-ce,sha512-neon)\x00'}, 0x58) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x9, 0x4, 0x3f, 0x200, 0x3, 0x4, 0x81, 0x0], 0x9, 0x80000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000240)={r1}) (async) write$cgroup_pressure(r2, &(0x7f0000000140)={'full', 0x20, 0x859, 0x20, 0x1c00000000000}, 0x2f) (async) syz_open_pts(r0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r4) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) (async) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async) 05:02:30 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5, 0x2}, 0x20) (async) write$cgroup_subtree(r0, 0x0, 0x11) (async) accept4$alg(r1, 0x0, 0x0, 0x800) 05:02:30 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69c163789fb44df835ca6360", 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfdd5, 0x1000, 0x3, 0xfffffff9, 0x4, 0x8, 0x6, 0x6723, 0x8, 0x9], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) syz_open_pts(r1, 0x0) [ 571.610544] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.617815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.625086] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 [ 571.723006] FAULT_INJECTION: forcing a failure. [ 571.723006] name failslab, interval 1, probability 0, space 0, times 0 [ 571.735141] CPU: 1 PID: 25923 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 571.743014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 571.752365] Call Trace: [ 571.754949] dump_stack+0x1b2/0x281 [ 571.758583] should_fail.cold+0x10a/0x149 [ 571.762731] should_failslab+0xd6/0x130 [ 571.766699] __kmalloc+0x6d/0x400 [ 571.770154] ? tty_buffer_alloc+0xc0/0x270 05:02:30 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0xfd) [ 571.774391] tty_buffer_alloc+0xc0/0x270 [ 571.778445] __tty_buffer_request_room+0x12c/0x290 [ 571.783371] tty_insert_flip_string_fixed_flag+0x8b/0x210 [ 571.788909] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 571.794876] pty_write+0xc3/0xf0 [ 571.798236] n_tty_write+0x85e/0xda0 [ 571.801942] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 571.806693] ? n_tty_open+0x160/0x160 [ 571.810494] ? do_wait_intr_irq+0x270/0x270 [ 571.814811] tty_write+0x410/0x740 [ 571.818352] ? n_tty_open+0x160/0x160 05:02:30 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0xfd) 05:02:30 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0xfd) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0xfd) (async) [ 571.822148] __vfs_write+0xe4/0x630 [ 571.825770] ? tty_compat_ioctl+0x240/0x240 [ 571.830088] ? debug_check_no_obj_freed+0x2c0/0x680 [ 571.835200] ? kernel_read+0x110/0x110 [ 571.839083] ? common_file_perm+0x3ee/0x580 [ 571.843401] ? security_file_permission+0x82/0x1e0 [ 571.848321] ? rw_verify_area+0xe1/0x2a0 [ 571.852396] vfs_write+0x17f/0x4d0 [ 571.856018] SyS_write+0xf2/0x210 [ 571.859462] ? SyS_read+0x210/0x210 [ 571.863086] ? __do_page_fault+0x159/0xad0 [ 571.867315] ? do_syscall_64+0x4c/0x640 [ 571.871279] ? SyS_read+0x210/0x210 05:02:30 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x200a80) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) [ 571.874896] do_syscall_64+0x1d5/0x640 [ 571.878777] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.883959] RIP: 0033:0x7f205ef9c669 [ 571.887656] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.895346] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 571.902607] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 [ 571.909865] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.917124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:02:30 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x200a80) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 05:02:30 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x200a80) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x0, 0x0, 0x0}) (async) socket$alg(0x26, 0x5, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) [ 571.924386] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 [ 571.931657] [ 571.931661] ====================================================== [ 571.931664] WARNING: possible circular locking dependency detected [ 571.931666] 4.14.294-syzkaller #0 Not tainted [ 571.931669] ------------------------------------------------------ [ 571.931671] syz-executor.5/25923 is trying to acquire lock: [ 571.931672] (console_owner){....}, at: [] console_unlock+0x307/0xf20 [ 571.931678] [ 571.931680] but task is already holding lock: [ 571.931681] (&(&port->lock)->rlock){-.-.}, at: [] tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 571.931689] [ 571.931692] which lock already depends on the new lock. [ 571.931693] [ 571.931694] [ 571.931697] the existing dependency chain (in reverse order) is: [ 571.931698] [ 571.931699] -> #2 (&(&port->lock)->rlock){-.-.}: [ 571.931707] _raw_spin_lock_irqsave+0x8c/0xc0 [ 571.931709] tty_port_tty_get+0x1d/0x80 [ 571.931712] tty_port_default_wakeup+0x11/0x40 [ 571.931714] serial8250_tx_chars+0x3fe/0xc70 [ 571.931717] serial8250_handle_irq.part.0+0x28d/0x330 [ 571.931720] serial8250_default_handle_irq+0x8a/0x1f0 [ 571.931722] serial8250_interrupt+0xf3/0x210 [ 571.931724] __handle_irq_event_percpu+0xee/0x7f0 [ 571.931726] handle_irq_event+0xed/0x240 [ 571.931729] handle_edge_irq+0x224/0xc40 [ 571.931730] handle_irq+0x35/0x50 [ 571.931732] do_IRQ+0x93/0x1d0 [ 571.931734] ret_from_intr+0x0/0x1e [ 571.931737] _raw_spin_unlock_irqrestore+0xa3/0xe0 [ 571.931739] uart_write+0x2dd/0x560 [ 571.931741] do_output_char+0x4f5/0x750 [ 571.931743] n_tty_write+0x3e3/0xda0 [ 571.931745] tty_write+0x410/0x740 [ 571.931747] redirected_tty_write+0x9c/0xb0 [ 571.931750] do_iter_write+0x3da/0x550 [ 571.931752] vfs_writev+0x125/0x290 [ 571.931754] do_writev+0xfc/0x2c0 [ 571.931756] do_syscall_64+0x1d5/0x640 [ 571.931758] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.931760] [ 571.931761] -> #1 (&port_lock_key){-.-.}: [ 571.931768] _raw_spin_lock_irqsave+0x8c/0xc0 [ 571.931770] serial8250_console_write+0x7d5/0xa10 [ 571.931772] console_unlock+0x99d/0xf20 [ 571.931774] vprintk_emit+0x224/0x620 [ 571.931776] vprintk_func+0x58/0x160 [ 571.931778] printk+0x9e/0xbc [ 571.931780] register_console+0x6f4/0xad0 [ 571.931782] univ8250_console_init+0x2f/0x3a [ 571.931785] console_init+0x46/0x53 [ 571.931787] start_kernel+0x521/0x763 [ 571.931789] secondary_startup_64+0xa5/0xb0 [ 571.931790] [ 571.931791] -> #0 (console_owner){....}: [ 571.931798] lock_acquire+0x170/0x3f0 [ 571.931800] console_unlock+0x36f/0xf20 [ 571.931803] vprintk_emit+0x224/0x620 [ 571.931804] vprintk_func+0x58/0x160 [ 571.931806] printk+0x9e/0xbc [ 571.931808] should_fail.cold+0xdf/0x149 [ 571.931810] should_failslab+0xd6/0x130 [ 571.931812] __kmalloc+0x6d/0x400 [ 571.931821] tty_buffer_alloc+0xc0/0x270 [ 571.931823] __tty_buffer_request_room+0x12c/0x290 [ 571.931826] tty_insert_flip_string_fixed_flag+0x8b/0x210 [ 571.931829] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 571.931831] pty_write+0xc3/0xf0 [ 571.931833] n_tty_write+0x85e/0xda0 [ 571.931835] tty_write+0x410/0x740 [ 571.931837] __vfs_write+0xe4/0x630 [ 571.931839] vfs_write+0x17f/0x4d0 [ 571.931841] SyS_write+0xf2/0x210 [ 571.931843] do_syscall_64+0x1d5/0x640 [ 571.931846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.931847] [ 571.931850] other info that might help us debug this: [ 571.931851] [ 571.931852] Chain exists of: [ 571.931853] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 571.931862] [ 571.931864] Possible unsafe locking scenario: [ 571.931865] [ 571.931867] CPU0 CPU1 [ 571.931869] ---- ---- [ 571.931870] lock(&(&port->lock)->rlock); [ 571.931875] lock(&port_lock_key); [ 571.931880] lock(&(&port->lock)->rlock); [ 571.931883] lock(console_owner); [ 571.931887] [ 571.931889] *** DEADLOCK *** [ 571.931890] [ 571.931892] 6 locks held by syz-executor.5/25923: [ 571.931893] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 571.931901] #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write+0x22d/0x740 [ 571.931909] #2: (&tty->termios_rwsem){++++}, at: [] n_tty_write+0x18a/0xda0 [ 571.931917] #3: (&ldata->output_lock){+.+.}, at: [] n_tty_write+0x82b/0xda0 [ 571.931924] #4: (&(&port->lock)->rlock){-.-.}, at: [] tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 571.931931] #5: (console_lock){+.+.}, at: [] vprintk_func+0x58/0x160 [ 571.931939] [ 571.931940] stack backtrace: [ 571.931944] CPU: 1 PID: 25923 Comm: syz-executor.5 Not tainted 4.14.294-syzkaller #0 [ 571.931948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 571.931949] Call Trace: [ 571.931951] dump_stack+0x1b2/0x281 [ 571.931954] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 571.931956] __lock_acquire+0x2e0e/0x3f20 [ 571.931958] ? trace_hardirqs_on+0x10/0x10 [ 571.931959] ? snprintf+0xd0/0xd0 [ 571.931962] ? trace_hardirqs_on+0x10/0x10 [ 571.931964] ? console_unlock+0x34a/0xf20 [ 571.931966] lock_acquire+0x170/0x3f0 [ 571.931968] ? console_unlock+0x307/0xf20 [ 571.931970] console_unlock+0x36f/0xf20 [ 571.931972] ? console_unlock+0x307/0xf20 [ 571.931974] vprintk_emit+0x224/0x620 [ 571.931976] vprintk_func+0x58/0x160 [ 571.931978] printk+0x9e/0xbc [ 571.931980] ? log_store.cold+0x16/0x16 [ 571.931982] ? __lock_acquire+0x5fc/0x3f20 [ 571.931984] ? ___ratelimit+0x2b5/0x510 [ 571.931986] should_fail.cold+0xdf/0x149 [ 571.931988] should_failslab+0xd6/0x130 [ 571.931990] __kmalloc+0x6d/0x400 [ 571.931992] ? tty_buffer_alloc+0xc0/0x270 [ 571.931994] tty_buffer_alloc+0xc0/0x270 [ 571.931997] __tty_buffer_request_room+0x12c/0x290 [ 571.931999] tty_insert_flip_string_fixed_flag+0x8b/0x210 [ 571.932002] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 571.932004] pty_write+0xc3/0xf0 [ 571.932006] n_tty_write+0x85e/0xda0 [ 571.932009] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 571.932011] ? n_tty_open+0x160/0x160 [ 571.932013] ? do_wait_intr_irq+0x270/0x270 [ 571.932014] tty_write+0x410/0x740 [ 571.932016] ? n_tty_open+0x160/0x160 [ 571.932018] __vfs_write+0xe4/0x630 [ 571.932021] ? tty_compat_ioctl+0x240/0x240 [ 571.932023] ? debug_check_no_obj_freed+0x2c0/0x680 [ 571.932025] ? kernel_read+0x110/0x110 [ 571.932027] ? common_file_perm+0x3ee/0x580 [ 571.932030] ? security_file_permission+0x82/0x1e0 [ 571.932032] ? rw_verify_area+0xe1/0x2a0 [ 571.932034] vfs_write+0x17f/0x4d0 [ 571.932036] SyS_write+0xf2/0x210 [ 571.932038] ? SyS_read+0x210/0x210 [ 571.932040] ? __do_page_fault+0x159/0xad0 [ 571.932042] ? do_syscall_64+0x4c/0x640 [ 571.932044] ? SyS_read+0x210/0x210 [ 571.932046] do_syscall_64+0x1d5/0x640 [ 571.932049] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.932051] RIP: 0033:0x7f205ef9c669 [ 571.932053] RSP: 002b:00007f205d910168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x52b880) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYBLOB="f5c70c86a056ca86b71d3d8b67a0839c9d5cce5be362f73a3bebcd2ce8779fbd8fc43f1c3d1da3cb", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r3], 0x11) 05:02:31 executing program 3: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf250000000008000b0003000000060003009216000005000d000100000008001700", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\a\x00\x00'], 0x3c}}, 0x80) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x400000000004, 0x121000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0xf8, 0x1, 0x8, 0x800}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) 05:02:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x105081, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xce49, 0x8, 0x9, 0x7fffffff, 0x8, "5bc2010fb045ce537f97bc622c9256e2bb52c9", 0x1}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x6}) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0x9, 0x6, 0x24, [0x8, 0x6, 0xea4fd03, 0x401, 0xffff, 0x8000, 0x1]}]}) syz_open_pts(r0, 0x4a0040) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69c163789fb44df835ca6360", 0x2, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfdd5, 0x1000, 0x3, 0xfffffff9, 0x4, 0x8, 0x6, 0x6723, 0x8, 0x9], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) syz_open_pts(r1, 0x0) 05:02:31 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xffff870f, 0x5], 0x2, 0x800}) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x3fffe, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) [ 571.932059] RAX: ffffffffffffffda RBX: 00007f205f0bdf80 RCX: 00007f205ef9c669 [ 571.932062] RDX: 0000000000000011 RSI: 0000000020000200 RDI: 0000000000000003 [ 571.932065] RBP: 00007f205d9101d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.932068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.932071] R13: 00007ffd9670b2af R14: 00007f205d910300 R15: 0000000000022000 05:02:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x105081, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xce49, 0x8, 0x9, 0x7fffffff, 0x8, "5bc2010fb045ce537f97bc622c9256e2bb52c9", 0x1}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x6}) write$cgroup_subtree(r0, 0x0, 0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x105081, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xce49, 0x8, 0x9, 0x7fffffff, 0x8, "5bc2010fb045ce537f97bc622c9256e2bb52c9", 0x1}) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x6}) (async) write$cgroup_subtree(r0, 0x0, 0x11) (async) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x52b880) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYBLOB="f5c70c86a056ca86b71d3d8b67a0839c9d5cce5be362f73a3bebcd2ce8779fbd8fc43f1c3d1da3cb", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r3], 0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x52b880) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYBLOB="f5c70c86a056ca86b71d3d8b67a0839c9d5cce5be362f73a3bebcd2ce8779fbd8fc43f1c3d1da3cb", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r3], 0x11) (async) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x20, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 3: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf250000000008000b0003000000060003009216000005000d000100000008001700", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\a\x00\x00'], 0x3c}}, 0x80) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000080), 0x400000000004, 0x121000) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0xf8, 0x1, 0x8, 0x800}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) 05:02:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0x9, 0x6, 0x24, [0x8, 0x6, 0xea4fd03, 0x401, 0xffff, 0x8000, 0x1]}]}) syz_open_pts(r0, 0x4a0040) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) 05:02:31 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}}, 0x20000084) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000c0c25ed213243286bf1e312fec6650235a8c93a6406457d949e41eef346c00c361e9991df40580825e229eb9a272d5c1c5b222a9205fa607733cefdf438f70539b8357f00e3e41f0f09672a824e11b84c581e4", @ANYRES16=r0, @ANYBLOB="00042cbd7000ffdbdf25060000001400060076657468315f746f5f627269646765001400020000000000000000000000000000000000080005000a01010214000200fe8000000000000000000000000000bb08000500ac1414bb0500010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80810) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x105081, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xce49, 0x8, 0x9, 0x7fffffff, 0x8, "5bc2010fb045ce537f97bc622c9256e2bb52c9", 0x1}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x6}) (async) write$cgroup_subtree(r0, 0x0, 0x11) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x52b880) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYBLOB="f5c70c86a056ca86b71d3d8b67a0839c9d5cce5be362f73a3bebcd2ce8779fbd8fc43f1c3d1da3cb", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r3], 0x11) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x20, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 3: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b5a104f820caf071fb9e024c547fff948b04a4b31304c7c31f948dc2f82517a55318dfde93e1e6f2d0d272994738338c823993ee28f6ff6892ccbdc57b0a05e1b1b7493ae7aafcc576522f9ac249a1cb5aa78b04935575454fca1e18c59b0f50cfeeb0641585f67bfa9d9d4c680e9837f75aae2f356ac58839cce8838311aaa9c649e26c1bea40a4d744a75ec08241391199966500cfdfdae2f968894e8913b1180996feacc967663877815ed04719b2ca56d89b18f01cd0fbb8376c0e78c394c939933c1aecc0e7993bc922764d1301bee9f016d2cf49dfb08e7c7f595f138f08bdf67821324e697d207dd03600aa0542a5c24c66e211036bb96be4075bbb7c308bcac24ab419f6fa9872ddff000000000000000000000000000000002cfda30a00000000000000009b5b8a9d2c234481305a0000000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf250000000008000b0003000000060003009216000005000d000100000008001700", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\a\x00\x00'], 0x3c}}, 0x80) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x400000000004, 0x121000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0xf8, 0x1, 0x8, 0x800}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf250000000008000b0003000000060003009216000005000d000100000008001700", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\a\x00\x00'], 0x3c}}, 0x80) (async) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000080), 0x400000000004, 0x121000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0xf8, 0x1, 0x8, 0x800}}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{}, {}], 0x0, 0x0, 0x0}) (async) 05:02:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0x9, 0x6, 0x24, [0x8, 0x6, 0xea4fd03, 0x401, 0xffff, 0x8000, 0x1]}]}) (async) syz_open_pts(r0, 0x4a0040) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040)=0x8, 0x4) (rerun: 64) 05:02:31 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}}, 0x20000084) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000c0c25ed213243286bf1e312fec6650235a8c93a6406457d949e41eef346c00c361e9991df40580825e229eb9a272d5c1c5b222a9205fa607733cefdf438f70539b8357f00e3e41f0f09672a824e11b84c581e4", @ANYRES16=r0, @ANYBLOB="00042cbd7000ffdbdf25060000001400060076657468315f746f5f627269646765001400020000000000000000000000000000000000080005000a01010214000200fe8000000000000000000000000000bb08000500ac1414bb0500010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80810) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x20, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x101000) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb9) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) write$cgroup_subtree(r0, 0x0, 0xffffffffffffff48) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x309140, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040)) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:31 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}}, 0x20000084) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000c0c25ed213243286bf1e312fec6650235a8c93a6406457d949e41eef346c00c361e9991df40580825e229eb9a272d5c1c5b222a9205fa607733cefdf438f70539b8357f00e3e41f0f09672a824e11b84c581e4", @ANYRES16=r0, @ANYBLOB="00042cbd7000ffdbdf25060000001400060076657468315f746f5f627269646765001400020000000000000000000000000000000000080005000a01010214000200fe8000000000000000000000000000bb08000500ac1414bb0500010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80810) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0xc55, 0xffffffff, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x482001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000040)={0x2, 0xa}) 05:02:31 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x101000) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb9) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) write$cgroup_subtree(r0, 0x0, 0xffffffffffffff48) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x101000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb9) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) (async) write$cgroup_subtree(r0, 0x0, 0xffffffffffffff48) (async) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 05:02:31 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x7ff, 0x67, "a44293267fad0872846d2cd3edda89bfcced8e", 0x400081, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000100)={0xd, 0xc0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "4932f86fc1ccd56363b794deb34c3af93bf681727a750ff7f12dc29b1f3b9dc8", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000000)={"c2621d8c85c653144e2e8de7605dc6a0552a173f18cdd9a80df55f0d3acd6b57"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffff15) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x309140, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040)) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xffffffff, 0x20c000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0x3, 0x8, 0x1, 0x9}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x450000, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0x1, 0x6, 0x100000001, 0x1, 0x3}) bind$alg(r2, 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3, 0x7, 0x0, 0x0, 0x20, "aca3f6fb14b7beb51b29149d6d75162a8967ac", 0x2, 0x4}) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x482001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000040)={0x2, 0xa}) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x309140, 0x0) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (rerun: 64) bind$alg(r2, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040)) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:31 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x7ff, 0x67, "a44293267fad0872846d2cd3edda89bfcced8e", 0x400081, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000100)={0xd, 0xc0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "4932f86fc1ccd56363b794deb34c3af93bf681727a750ff7f12dc29b1f3b9dc8", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000000)={"c2621d8c85c653144e2e8de7605dc6a0552a173f18cdd9a80df55f0d3acd6b57"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffff15) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x7ff, 0x67, "a44293267fad0872846d2cd3edda89bfcced8e", 0x400081, 0x1}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000100)={0xd, 0xc0}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "4932f86fc1ccd56363b794deb34c3af93bf681727a750ff7f12dc29b1f3b9dc8"}) (async) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000000)={"c2621d8c85c653144e2e8de7605dc6a0552a173f18cdd9a80df55f0d3acd6b57"}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffff15) (async) 05:02:31 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x101000) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb9) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) write$cgroup_subtree(r0, 0x0, 0xffffffffffffff48) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000180), 0x0, 0x101000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb9) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) (async) write$cgroup_subtree(r0, 0x0, 0xffffffffffffff48) (async) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (rerun: 32) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xffffffff, 0x20c000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0x3, 0x8, 0x1, 0x9}) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x450000, 0x0) (async, rerun: 32) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0x1, 0x6, 0x100000001, 0x1, 0x3}) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3, 0x7, 0x0, 0x0, 0x20, "aca3f6fb14b7beb51b29149d6d75162a8967ac", 0x2, 0x4}) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x80000000, 0x7], 0x3}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 05:02:31 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x482001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000040)={0x2, 0xa}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x482001, 0x0) (async) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000040)={0x2, 0xa}) (async) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x80000000, 0x7], 0x3}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 05:02:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) socketpair(0x8, 0x4, 0x7, &(0x7f0000000100)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) 05:02:31 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x7ff, 0x67, "a44293267fad0872846d2cd3edda89bfcced8e", 0x400081, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000100)={0xd, 0xc0}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "4932f86fc1ccd56363b794deb34c3af93bf681727a750ff7f12dc29b1f3b9dc8", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000000)={"c2621d8c85c653144e2e8de7605dc6a0552a173f18cdd9a80df55f0d3acd6b57"}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffff15) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xffffffff, 0x20c000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0x3, 0x8, 0x1, 0x9}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x450000, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0x1, 0x6, 0x100000001, 0x1, 0x3}) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3, 0x7, 0x0, 0x0, 0x20, "aca3f6fb14b7beb51b29149d6d75162a8967ac", 0x2, 0x4}) 05:02:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) (async) socketpair(0x8, 0x4, 0x7, &(0x7f0000000100)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) 05:02:31 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x80000000, 0x7], 0x3}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x80000000, 0x7], 0x3}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) (async) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 05:02:31 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0xc050) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) syz_open_pts(r0, 0x10ec3) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r2, 0x4000) 05:02:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) (async) socketpair(0x8, 0x4, 0x7, &(0x7f0000000100)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f00000000c0)) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0xd8e, 0x3, 0x80000001, 0x9}, 0x10) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 05:02:31 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xa7) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:31 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0xc050) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) syz_open_pts(r0, 0x10ec3) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) (async) syz_open_pts(r2, 0x4000) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 32) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0xd8e, 0x3, 0x80000001, 0x9}, 0x10) (rerun: 32) 05:02:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x3, 0x0, 0x1, 0xffc00000], 0x5, 0x400, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1731c43a) syz_open_dev$sndmidi(&(0x7f0000000080), 0x34d, 0x22000) 05:02:31 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0xc050) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) syz_open_pts(r0, 0x10ec3) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) syz_open_pts(r2, 0x4000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}}, 0xc050) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) (async) syz_open_pts(r0, 0x10ec3) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) syz_open_pts(r2, 0x4000) (async) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0xd8e, 0x3, 0x80000001, 0x9}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0xd8e, 0x3, 0x80000001, 0x9}, 0x10) (async) 05:02:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x3ff}) 05:02:31 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xa7) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xa7) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x3, 0x0, 0x1, 0xffc00000], 0x5, 0x400, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1731c43a) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000000080), 0x34d, 0x22000) (rerun: 32) 05:02:31 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) (async) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x3ff}) 05:02:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) syz_open_pts(r0, 0x0) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xa7) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x7f, 0x1, 0x40000, 0x2, 0x0, "cf01000100a627af800b81ce63600000002000", 0xfffffffd}) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x3, 0x0, 0x1, 0xffc00000], 0x5, 0x400, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1731c43a) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x34d, 0x22000) 05:02:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x3ff}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(r0, 0x0, 0x11) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000)={0xd, 0x3ff}) (async) 05:02:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x0) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x7f, 0x1, 0x40000, 0x2, 0x0, "cf01000100a627af800b81ce63600000002000", 0xfffffffd}) 05:02:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x0) (async) 05:02:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x7f, 0x1, 0x40000, 0x2, 0x0, "cf01000100a627af800b81ce63600000002000", 0xfffffffd}) 05:02:31 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80000) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) 05:02:31 executing program 0: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x20c, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) syz_open_pts(0xffffffffffffffff, 0x9380) 05:02:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000100)=0x9) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0xffffa20c, 0x2, 0x200, r4, 0x5, '\x00', r5, r3, 0x5, 0x5, 0x5, 0xe}, 0x3a) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x8) 05:02:31 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:31 executing program 0: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x20c, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) (async) syz_open_pts(0xffffffffffffffff, 0x9380) 05:02:31 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) (async) 05:02:32 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) (async) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xc55, 0x0, 0x40000, 0x3, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0xffffffffffffffb4, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x886}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73e97fac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f55ebcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fa1ed3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3930f839}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cc9dd4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ee5d204}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3945d9c5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ddad3e7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10bbe663}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x216a56a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64a8aac8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcbd83ba}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56f9c0ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f98b7b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x110371bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6831ba84}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) bind$alg(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf250400000006001b004e2300001400080065727370616e3000000000000000000014002000"/62], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000100)=0x9) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0xffffa20c, 0x2, 0x200, r4, 0x5, '\x00', r5, r3, 0x5, 0x5, 0x5, 0xe}, 0x3a) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x8) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = shmget(0x3, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r1, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:32 executing program 0: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x20c, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) syz_open_pts(0xffffffffffffffff, 0x9380) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xc55, 0x0, 0x40000, 0x3, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0xffffffffffffffb4, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x886}, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73e97fac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f55ebcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fa1ed3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3930f839}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cc9dd4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ee5d204}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3945d9c5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ddad3e7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10bbe663}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x216a56a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64a8aac8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcbd83ba}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56f9c0ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f98b7b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x110371bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6831ba84}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) bind$alg(r3, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf250400000006001b004e2300001400080065727370616e3000000000000000000014002000"/62], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x80000000, 0x101100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000340)) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000100)=0x9) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) (async) getpeername$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6, 0xffffa20c, 0x2, 0x200, r4, 0x5, '\x00', r5, r3, 0x5, 0x5, 0x5, 0xe}, 0x3a) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x8) 05:02:32 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x11) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = shmget(0x3, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) (async) shmctl$IPC_RMID(r1, 0x0) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (rerun: 64) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) syz_open_pts(r0, 0x0) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xc55, 0x0, 0x40000, 0x3, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f80), r1) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0xffffffffffffffb4, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x886}, 0x0) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73e97fac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f55ebcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fa1ed3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3930f839}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cc9dd4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ee5d204}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3945d9c5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ddad3e7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10bbe663}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x216a56a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64a8aac8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcbd83ba}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56f9c0ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f98b7b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x110371bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6831ba84}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) (async, rerun: 64) bind$alg(r3, 0x0, 0x0) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf250400000006001b004e2300001400080065727370616e3000000000000000000014002000"/62], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 05:02:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$link(0x8, r1, r3) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x11) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x80000000, 0x101100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000340)) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x0) (async) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = shmget(0x3, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) (async) shmctl$IPC_RMID(r1, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'net'}, {0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuset'}, {0x2b, 'net_prio'}]}, 0x38) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x0) (async) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x80000000, 0x101100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000340)) 05:02:32 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x1, 0x8000, 0xfffffe01, 0xfffffffc, 0xc1, "cf4c11316ea6bc69a563789fb4a56909b1b360"}) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x94a01) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'net'}, {0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuset'}, {0x2b, 'net_prio'}]}, 0x38) 05:02:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$link(0x8, r1, r3) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x11) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x540) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0xe30, 0xb5, 0xffffffff, 0xe2, "75dd1000a6e4a4c93fb4197a0fef1df3a87409", 0x0, 0xde8}) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x10001) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'net'}, {0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuset'}, {0x2b, 'net_prio'}]}, 0x38) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'net'}, {0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuset'}, {0x2b, 'net_prio'}]}, 0x38) (async) 05:02:32 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x1, 0x8000, 0xfffffe01, 0xfffffffc, 0xc1, "cf4c11316ea6bc69a563789fb4a56909b1b360"}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x94a01) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x540) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000000), 0x7, 0x540) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0xe30, 0xb5, 0xffffffff, 0xe2, "75dd1000a6e4a4c93fb4197a0fef1df3a87409", 0x0, 0xde8}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0xe30, 0xb5, 0xffffffff, 0xe2, "75dd1000a6e4a4c93fb4197a0fef1df3a87409", 0x0, 0xde8}) (async) 05:02:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$link(0x8, r1, r3) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x11) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x10001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) (async) syz_open_pts(r0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x10001) (async) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x1d, 0x4, 0xff, "20e9bf22dca772d89bb16ed4868f77435dc0d1", 0xc6}) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x540) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:32 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x1, 0x8000, 0xfffffe01, 0xfffffffc, 0xc1, "cf4c11316ea6bc69a563789fb4a56909b1b360"}) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(0xffffffffffffffff, 0x94a01) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0xe30, 0xb5, 0xffffffff, 0xe2, "75dd1000a6e4a4c93fb4197a0fef1df3a87409", 0x0, 0xde8}) 05:02:32 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x5, 0xfd9, 0x9c, 0x9, 0x5, 0x0, 0x3}, 0x1c) r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 05:02:32 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x5, 0xfd9, 0x9c, 0x9, 0x5, 0x0, 0x3}, 0x1c) r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x5, 0xfd9, 0x9c, 0x9, 0x5, 0x0, 0x3}, 0x1c) (async) syz_open_dev$media(&(0x7f0000000000), 0x5, 0x20000) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) (async) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x10001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) (async) syz_open_pts(r0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x10001) (async) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000140)={0x4d5770f016dbaf14}) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000001c0)=0xaa) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0xd7be, 0x0, "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"}) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x1d, 0x4, 0xff, "20e9bf22dca772d89bb16ed4868f77435dc0d1", 0xc6}) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x1d, 0x4, 0xff, "20e9bf22dca772d89bb16ed4868f77435dc0d1", 0xc6}) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x400040) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x620401, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffff2c5, 0x20, 0x8000, 0x85, 0xf8, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x402000, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8) 05:02:32 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"15f8b77c307e67181af5f022583b37e967c0447bff93e4d397bc40c33e99779f"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x7, 0xfff, 0x7, 0x8, 0xc, "014ecc3aaa22866d4e10f821ed0d9e44cf5fdf", 0x4, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f00000000c0), &(0x7f0000000140)}) 05:02:32 executing program 3: syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x5, 0xfd9, 0x9c, 0x9, 0x5, 0x0, 0x3}, 0x1c) r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x20000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x5, 0xfd9, 0x9c, 0x9, 0x5, 0x0, 0x3}, 0x1c) (async) syz_open_dev$media(&(0x7f0000000000), 0x5, 0x20000) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) (async) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000140)={0x4d5770f016dbaf14}) (async, rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 64) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000001c0)=0xaa) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0xd7be, 0x0, "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"}) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:32 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"15f8b77c307e67181af5f022583b37e967c0447bff93e4d397bc40c33e99779f"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x7, 0xfff, 0x7, 0x8, 0xc, "014ecc3aaa22866d4e10f821ed0d9e44cf5fdf", 0x4, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f00000000c0), &(0x7f0000000140)}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"15f8b77c307e67181af5f022583b37e967c0447bff93e4d397bc40c33e99779f"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x7, 0xfff, 0x7, 0x8, 0xc, "014ecc3aaa22866d4e10f821ed0d9e44cf5fdf", 0x4, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r4, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r5, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f00000000c0), &(0x7f0000000140)}) (async) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x1d, 0x4, 0xff, "20e9bf22dca772d89bb16ed4868f77435dc0d1", 0xc6}) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x1d, 0x4, 0xff, "20e9bf22dca772d89bb16ed4868f77435dc0d1", 0xc6}) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x400040) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x620401, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffff2c5, 0x20, 0x8000, 0x85, 0xf8, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x402000, 0x0) bind$alg(r2, 0x0, 0x0) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000080), 0x20, 0x1c5000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000140)={0x4d5770f016dbaf14}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 64) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (async, rerun: 64) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000001c0)=0xaa) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async, rerun: 32) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0xd7be, 0x0, "5890aa2b62e8ea1293270da93112d0fc9e0000010000000000f722dbe80c6186ea5122dbb495958c668ee4cc58654ceefcb204443533e5455b5cf47fbad29c34aa2a78db1f58f861868269cdd7bbd60602390118669170628441ea0a913f398b8115681af5176bdd726eb747733a6aaa4d49a5e5aa84af7cdbb06f5d7cc7e50b6d43c688ebbaf85211d272ebd4fabc9dce848cba372a658a68a9dc7365826bec2aff754c0d83321177be6f010aba0c12dc2eab603ac1635d9d1a491937ab17a9d6702e1d076d23ad5c9acc12e22d8cc1a68f4fb7f4b9088536e0a824d0cd9f083c0e8da16cc7a97d47b5248789e379ae945fd324189531196ad8e673d5736bfa"}) (rerun: 32) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)='keyring\x00') r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x11) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x400040) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x620401, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffff2c5, 0x20, 0x8000, 0x85, 0xf8, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x402000, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x400040) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x620401, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffff2c5, 0x20, 0x8000, 0x85, 0xf8, "cf4c11316ea6bc69a563789fb44df835ca6360", 0x0, 0x1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x402000, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8) (async) 05:02:32 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"15f8b77c307e67181af5f022583b37e967c0447bff93e4d397bc40c33e99779f"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x7, 0xfff, 0x7, 0x8, 0xc, "014ecc3aaa22866d4e10f821ed0d9e44cf5fdf", 0x4, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r5, 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f00000000c0), &(0x7f0000000140)}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"15f8b77c307e67181af5f022583b37e967c0447bff93e4d397bc40c33e99779f"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x7, 0xfff, 0x7, 0x8, 0xc, "014ecc3aaa22866d4e10f821ed0d9e44cf5fdf", 0x4, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r4, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r5, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212580, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000540)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000400)={{r7, 0x0, 0x2, [0xb5b5, 0x10]}, {r8, r9, 0x3, [0xef43, 0x80000001]}, 0x4, [0x8000, 0x3]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={r8, &(0x7f00000000c0), &(0x7f0000000140)}) (async) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000080), 0x20, 0x1c5000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) syz_open_dev$media(&(0x7f0000000080), 0x20, 0x1c5000) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) (async) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) 05:02:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)='keyring\x00') r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x11) 05:02:32 executing program 2: ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@any, 0xffff}, @host, 0x2, 0x6, 0x1, 0x9, 0x9, 0x800, 0x2}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8001, 0x8000, 0x1, 0x3, 0xb88, 0x8000, 0x62, 0xbd5, 0x8, 0x200, 0x1, 0x64, 0x1000, 0x10001, 0x0, 0x2, {0x80, 0x40be}, 0xa7, 0xfd}}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000140)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000280)={0x3ff, 0xfffffca0, 0x8, 0x3, 0x20, "13fe793d2b5a5f27a6cc94ec9739a6db3486eb", 0x100, 0x400}) bind$alg(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000080), 0x20, 0x1c5000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) syz_open_dev$media(&(0x7f0000000080), 0x20, 0x1c5000) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) (async) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) 05:02:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)='keyring\x00') r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x11) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) shmget(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x2, 0x3, 0x0, 0x2000000}) 05:02:32 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="21502f605fc116eb11db8029dcb949776a4d3368aef3f109181f39643bd6f3dad10d53089b7568b21f17e0e80816b6d4e173df8882878883e5a09746b480448395b88dd3810d372afdcb4daa217c14742eba549b45e4ee3f67c43181839879c67b647cb094ffa42f237b3da69ff4bfa3f1277f0b8f27ac2d3bce91f758e2de242267172bf73b6490aec7c93ebbad2cbcae198b30d39ed7f9d921270465961d3f23a9a1a9ea19a9ef9163fef96800ad36ab983b055f25bde54f1ea61cfa3f466bf69e7baa9f", 0xc5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x9}) syz_open_pts(r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000240)={r3}) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) 05:02:32 executing program 2: ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@any, 0xffff}, @host, 0x2, 0x6, 0x1, 0x9, 0x9, 0x800, 0x2}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8001, 0x8000, 0x1, 0x3, 0xb88, 0x8000, 0x62, 0xbd5, 0x8, 0x200, 0x1, 0x64, 0x1000, 0x10001, 0x0, 0x2, {0x80, 0x40be}, 0xa7, 0xfd}}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000140)) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000280)={0x3ff, 0xfffffca0, 0x8, 0x3, 0x20, "13fe793d2b5a5f27a6cc94ec9739a6db3486eb", 0x100, 0x400}) (async) bind$alg(r2, 0x0, 0x0) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000)=[{0x80000000}], &(0x7f0000000040)}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000140)=0x5}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000340)={r2}) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) shmget(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x2, 0x3, 0x0, 0x2000000}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) shmget(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x2, 0x3, 0x0, 0x2000000}) (async) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) 05:02:32 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="21502f605fc116eb11db8029dcb949776a4d3368aef3f109181f39643bd6f3dad10d53089b7568b21f17e0e80816b6d4e173df8882878883e5a09746b480448395b88dd3810d372afdcb4daa217c14742eba549b45e4ee3f67c43181839879c67b647cb094ffa42f237b3da69ff4bfa3f1277f0b8f27ac2d3bce91f758e2de242267172bf73b6490aec7c93ebbad2cbcae198b30d39ed7f9d921270465961d3f23a9a1a9ea19a9ef9163fef96800ad36ab983b055f25bde54f1ea61cfa3f466bf69e7baa9f", 0xc5) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x9}) syz_open_pts(r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000240)={r3}) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/163, 0xa3) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x8}) 05:02:32 executing program 2: ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@any, 0xffff}, @host, 0x2, 0x6, 0x1, 0x9, 0x9, 0x800, 0x2}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8001, 0x8000, 0x1, 0x3, 0xb88, 0x8000, 0x62, 0xbd5, 0x8, 0x200, 0x1, 0x64, 0x1000, 0x10001, 0x0, 0x2, {0x80, 0x40be}, 0xa7, 0xfd}}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000140)) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r3, 0x0, 0x0) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000280)={0x3ff, 0xfffffca0, 0x8, 0x3, 0x20, "13fe793d2b5a5f27a6cc94ec9739a6db3486eb", 0x100, 0x400}) (async, rerun: 64) bind$alg(r2, 0x0, 0x0) (rerun: 64) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000)=[{0x80000000}], &(0x7f0000000040)}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000140)=0x5}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000340)={r2}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000140)=0x5}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000340)={r2}) (async) 05:02:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) shmget(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x1, 0x2, 0x3, 0x0, 0x2000000}) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_pts(r1, 0x0) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/163, 0xa3) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x8}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(r0, 0x0, 0x11) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/163, 0xa3) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x8}) (async) 05:02:32 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="21502f605fc116eb11db8029dcb949776a4d3368aef3f109181f39643bd6f3dad10d53089b7568b21f17e0e80816b6d4e173df8882878883e5a09746b480448395b88dd3810d372afdcb4daa217c14742eba549b45e4ee3f67c43181839879c67b647cb094ffa42f237b3da69ff4bfa3f1277f0b8f27ac2d3bce91f758e2de242267172bf73b6490aec7c93ebbad2cbcae198b30d39ed7f9d921270465961d3f23a9a1a9ea19a9ef9163fef96800ad36ab983b055f25bde54f1ea61cfa3f466bf69e7baa9f", 0xc5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x9}) syz_open_pts(r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000240)={r3}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="21502f605fc116eb11db8029dcb949776a4d3368aef3f109181f39643bd6f3dad10d53089b7568b21f17e0e80816b6d4e173df8882878883e5a09746b480448395b88dd3810d372afdcb4daa217c14742eba549b45e4ee3f67c43181839879c67b647cb094ffa42f237b3da69ff4bfa3f1277f0b8f27ac2d3bce91f758e2de242267172bf73b6490aec7c93ebbad2cbcae198b30d39ed7f9d921270465961d3f23a9a1a9ea19a9ef9163fef96800ad36ab983b055f25bde54f1ea61cfa3f466bf69e7baa9f", 0xc5) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x9}) (async) syz_open_pts(r2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000240)={r3}) (async) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="401fc15e865e75185f4d81c9e0466ab77cfb6414aa5811d6e2cc3f0f611d8aa9bd6be12cf5acd0dfe257d27363c48230629dd320202d852e8349d4291674c0cb37c19586b588382940ec00d822c1588aab36619298bee2d2d46a4b321240e79311cf09625f49f7e1528aa1", 0x6b) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0x0) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000)=[{0x80000000}], &(0x7f0000000040)}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000140)=0x5}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000340)={r2}) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f00000001c0)={0x0, 0x5, 0x3, '\x00', &(0x7f0000000140)=0x5}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000340)={r2}) (async) 05:02:32 executing program 5: keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) syz_open_pts(r1, 0x0) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="401fc15e865e75185f4d81c9e0466ab77cfb6414aa5811d6e2cc3f0f611d8aa9bd6be12cf5acd0dfe257d27363c48230629dd320202d852e8349d4291674c0cb37c19586b588382940ec00d822c1588aab36619298bee2d2d46a4b321240e79311cf09625f49f7e1528aa1", 0x6b) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="401fc15e865e75185f4d81c9e0466ab77cfb6414aa5811d6e2cc3f0f611d8aa9bd6be12cf5acd0dfe257d27363c48230629dd320202d852e8349d4291674c0cb37c19586b588382940ec00d822c1588aab36619298bee2d2d46a4b321240e79311cf09625f49f7e1528aa1", 0x6b) (async) 05:02:32 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x8, '\x00', &(0x7f0000000000)=0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x0) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/163, 0xa3) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x8}) 05:02:32 executing program 5: keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f00000000c0)={0x6, 0x4}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="401fc15e865e75185f4d81c9e0466ab77cfb6414aa5811d6e2cc3f0f611d8aa9bd6be12cf5acd0dfe257d27363c48230629dd320202d852e8349d4291674c0cb37c19586b588382940ec00d822c1588aab36619298bee2d2d46a4b321240e79311cf09625f49f7e1528aa1", 0x6b) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)="401fc15e865e75185f4d81c9e0466ab77cfb6414aa5811d6e2cc3f0f611d8aa9bd6be12cf5acd0dfe257d27363c48230629dd320202d852e8349d4291674c0cb37c19586b588382940ec00d822c1588aab36619298bee2d2d46a4b321240e79311cf09625f49f7e1528aa1", 0x6b) (async) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f00000000c0)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000000)={0x8, "bfd8ec02edce0fed3195d7eef56012d9664840d8b55a450a04a6c0661d743bda", 0x5, 0x1}) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f00000000c0)={0x6, 0x4}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:32 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x8, '\x00', &(0x7f0000000000)=0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x0) 05:02:32 executing program 5: keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x11) (async) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000000)={0x8, "bfd8ec02edce0fed3195d7eef56012d9664840d8b55a450a04a6c0661d743bda", 0x5, 0x1}) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000140)={0x5, 0x1, "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"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f00000000c0)) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) 05:02:32 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x8, '\x00', &(0x7f0000000000)=0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x8, '\x00', &(0x7f0000000000)=0x3}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) syz_open_pts(r1, 0x0) (async) 05:02:32 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000300), 0x1, 0x0) (async, rerun: 64) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) (rerun: 64) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f00000000c0)={0x6, 0x4}) (async, rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (rerun: 64) 05:02:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000000)={0x8, "bfd8ec02edce0fed3195d7eef56012d9664840d8b55a450a04a6c0661d743bda", 0x5, 0x1}) 05:02:32 executing program 5: syz_open_pts(0xffffffffffffffff, 0x800) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x400}) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) (rerun: 32) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async, rerun: 32) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000140)={0x5, 0x1, "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"}) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xc55, 0x0, 0x40000, 0x2, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) 05:02:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x11) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f00000000c0)) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) 05:02:33 executing program 3: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)={0x0, 0xfe48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) 05:02:33 executing program 0: accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_pts(r0, 0x0) 05:02:33 executing program 5: syz_open_pts(0xffffffffffffffff, 0x800) (async) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x400}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 05:02:33 executing program 4: pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0xfffffe01, 0x0, 0x0, "cf4c11316ea6bc69a563789fb44df835ca6360"}) socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 05:02:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000140)={0x5, 0x1, "0d5d6cac0fc8a4e76bbcd333d4f3262a83ed9de051901d12f2d80b6cb862b7adb5d2a0405276b2de1a55c4d2147eb17ae34f600955320a456d775b31cae142d6b90adb5b28955c745eefd058393acc5cc47327d9f6199001574058de5aa3855e8a186e5449055d99de3fe1621f245badcd16016cf8538728914dd5d6f93417e31b78886bda6ffff634c3b624fc517629ffc4a9a4c963746cba47888075be79127337b68651d362e58cd7b948df92f93844ee56a6ddb0475e7b85cba09b9756ca0906