, 0x0, 0x5}, 0x48) 00:03:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:03:57 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560e, 0x0) 00:03:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, 0x0) 00:03:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:03:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, r2, r1, 0x0, 0x0, 0x0, r1], 0x7, 0x800, 0x0, 0xffffffffffffffff}) accept$inet(r3, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:57 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560e, 0x0) 00:03:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:03:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, r2, r1, 0x0, 0x0, 0x0, r1], 0x7, 0x800}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:58 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560e, 0x0) 00:03:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:58 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560e, 0x0) 00:03:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:03:58 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560e, 0x0) 00:03:58 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:59 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560e, 0x0) 00:03:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:03:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:59 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:59 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:59 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, 0x0) 00:03:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:59 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:03:59 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5450, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:03:59 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:03:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:03:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, 0x0) 00:03:59 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:03:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:03:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 00:03:59 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:03:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, 0x0) 00:04:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:04:00 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300), 0x48) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, 0x0) 00:04:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:04:00 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300), 0x48) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, 0x0) 00:04:00 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300), 0x48) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, 0x0) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, 0x0) 00:04:00 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300), 0x48) 00:04:00 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, 0x0) 00:04:00 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, 0x0) 00:04:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300), 0x48) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:00 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, 0x0) 00:04:00 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, 0x0) 00:04:00 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300), 0x48) 00:04:00 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, 0x0) 00:04:00 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, 0x0) 00:04:00 executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:04:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, 0x0) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:04:00 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, 0x0) 00:04:00 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, 0x0) 00:04:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:04:00 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5609, 0x0) 00:04:00 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, 0x0) 00:04:00 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5605, 0x0) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1c, 0xa, 0x15b}) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:00 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:00 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:00 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:00 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:00 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:00 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, 0x0) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:00 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:01 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:01 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, 0x0) 00:04:01 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:01 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, 0x0) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:01 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, 0x0) 00:04:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, 0x0) 00:04:01 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, 0x0) 00:04:01 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, 0x0) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:01 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, 0x0) 00:04:01 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, 0x0) 00:04:01 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, 0x0) 00:04:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:01 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5603, 0x0) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, 0x0) 00:04:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:01 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:01 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, 0x0) 00:04:01 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:01 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, 0x0) 00:04:01 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, 0x0) 00:04:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:01 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, 0x0) 00:04:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, 0x0) 00:04:01 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:01 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, 0x0) 00:04:01 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:01 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, 0x0) 00:04:01 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:01 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, 0x0) 00:04:01 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5601, 0x0) 00:04:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:01 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:01 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, 0x0) 00:04:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:02 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, 0x0) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:02 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, 0x0) 00:04:02 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, 0x0) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, 0x0) 00:04:02 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, 0x0) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, 0x0) 00:04:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, 0x0) 00:04:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, 0x0) 00:04:02 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, 0x0) 00:04:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, 0x0) 00:04:02 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:02 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5452, 0x0) 00:04:02 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:02 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, 0x0) 00:04:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) ioctl$I2C_TIMEOUT(r1, 0x702, 0x8) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x2, 0x1d, 0xfffffffc, 0x80000000, 0x0}) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, 0x0) 00:04:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) ioctl$I2C_TIMEOUT(r1, 0x702, 0x8) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x2, 0x1d, 0xfffffffc, 0x80000000, 0x0}) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) ioctl$I2C_TIMEOUT(r1, 0x702, 0x8) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x2, 0x1d, 0xfffffffc, 0x80000000, 0x0}) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$I2C_TIMEOUT(r0, 0x702, 0x8) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$I2C_TIMEOUT(r0, 0x702, 0x8) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:03 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) socket$rxrpc(0x21, 0x2, 0xa) 00:04:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 00:04:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) socket$rxrpc(0x21, 0x2, 0xa) 00:04:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:04 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) 00:04:04 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 1: socket$rxrpc(0x21, 0x2, 0x0) 00:04:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 1: socket$rxrpc(0x21, 0x2, 0x0) 00:04:04 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:04 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 1: socket$rxrpc(0x21, 0x2, 0x0) 00:04:04 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:04 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:04 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:04 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:04 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:04 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:04 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:04 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, 0x0) 00:04:05 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:05 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, 0x0) 00:04:05 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, 0x0) 00:04:05 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, 0x0) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, 0x0) 00:04:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, 0x0) 00:04:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, 0x0) 00:04:06 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5412, 0x0) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, 0x0) 00:04:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5412, 0x0) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5412, 0x0) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5412, 0x0) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, 0x0) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5412, 0x0) 00:04:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:06 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, 0x0) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5412, 0x0) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:06 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, 0x0) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, 0x0) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, 0x0) 00:04:06 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5421, 0x0) 00:04:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, 0x0) 00:04:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, 0x0) 00:04:07 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, 0x0) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, 0x0) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, 0x0) 00:04:07 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, 0x0) 00:04:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, 0x0) 00:04:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, 0x0) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, 0x0) 00:04:07 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, 0x0) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, 0x0) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, 0x0) 00:04:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, 0x0) 00:04:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:07 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b6a, 0x0) 00:04:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b6a, 0x0) 00:04:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, 0x0) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b6a, 0x0) 00:04:07 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b6a, 0x0) 00:04:07 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b64, 0x0) 00:04:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b6a, 0x0) 00:04:07 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b6a, 0x0) 00:04:07 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:07 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:08 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:08 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:08 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, 0x0) 00:04:08 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, 0x0) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, 0x0) 00:04:08 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:08 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:08 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, 0x0) 00:04:08 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, 0x0) 00:04:08 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:08 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, 0x0) 00:04:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, 0x0) [ 248.817103][ T2218] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.818456][ T2218] ieee802154 phy1 wpan1: encryption failed: -22 00:04:08 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, 0x0) 00:04:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:08 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, 0x0) 00:04:08 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, 0x0) 00:04:08 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:08 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, 0x0) 00:04:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:08 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, 0x0) 00:04:08 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:08 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, 0x0) 00:04:08 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, 0x0) 00:04:09 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:09 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, 0x0) 00:04:09 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, 0x0) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:09 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:09 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5410, 0x0) 00:04:09 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:09 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:09 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0) 00:04:09 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:09 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b65, 0x0) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:09 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b65, 0x0) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:09 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b65, 0x0) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:09 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b65, 0x0) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:09 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:09 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b65, 0x0) 00:04:09 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b65, 0x0) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:09 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, 0x0) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:09 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, 0x0) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:09 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, 0x0) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, 0x0) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:09 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, 0x0) 00:04:09 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, 0x0) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:09 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x5409, 0x0) 00:04:09 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, 0x0) 00:04:10 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:10 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, 0x0) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, 0x0) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:10 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, 0x0) 00:04:10 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, 0x0) 00:04:10 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b65, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, 0x0) 00:04:10 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, 0x0) 00:04:10 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) 00:04:10 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, 0x0) 00:04:10 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x540b, 0x0) 00:04:10 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) 00:04:10 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, 0x0) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) 00:04:10 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b67, 0x0) 00:04:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:10 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfb, 0x0) 00:04:10 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x23, [0x1c6, 0x8000000000000001, 0x8, 0x20, 0x8000000000000000], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/35}, &(0x7f0000000180)=0x78) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:10 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x23, [0x1c6, 0x8000000000000001, 0x8, 0x20, 0x8000000000000000], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/35}, &(0x7f0000000180)=0x78) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:10 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x23, [0x1c6, 0x8000000000000001, 0x8, 0x20, 0x8000000000000000], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/35}, &(0x7f0000000180)=0x78) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x23, [0x1c6, 0x8000000000000001, 0x8, 0x20, 0x8000000000000000], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/35}, &(0x7f0000000180)=0x78) 00:04:10 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) 00:04:10 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, 0x0) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:10 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, 0x0) 00:04:10 executing program 1: accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) 00:04:10 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:10 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 1: accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 00:04:10 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: accept$inet(0xffffffffffffffff, 0x0, 0x0) 00:04:11 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, 0x0) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:11 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, 0x0) 00:04:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, 0x0) 00:04:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, 0x0) 00:04:11 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, 0x0) 00:04:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, 0x0) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, 0x0) 00:04:11 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, 0x0) 00:04:11 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, 0x0) 00:04:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, 0x0) 00:04:11 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, 0x0) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:11 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, 0x0) 00:04:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, 0x0) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, 0x0) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, 0x0) 00:04:11 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, 0x0) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, 0x0) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, 0x0) 00:04:11 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, 0x0) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:11 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b71, 0x0) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, 0x0) 00:04:11 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, 0x0) 00:04:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4bfa, 0x0) 00:04:11 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, 0x0) 00:04:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:11 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, 0x0) 00:04:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b68, 0x0) 00:04:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:11 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:11 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, 0x0) 00:04:11 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, 0x0) 00:04:11 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:11 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, 0x0) 00:04:11 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:11 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:12 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, 0x0) 00:04:12 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) 00:04:12 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:12 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) 00:04:12 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:12 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, 0x0) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:12 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:12 executing program 5: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:12 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, 0x0) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 5: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:04:12 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, 0x0) 00:04:12 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, 0x0) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:12 executing program 5: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, 0x0) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:04:12 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, 0x0) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, 0x0) 00:04:12 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, 0x0) 00:04:12 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, 0x0) 00:04:12 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, 0x0) 00:04:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:12 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:12 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, 0x0) 00:04:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, 0x0) 00:04:12 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, 0x0) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 00:04:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b52, 0x0) 00:04:12 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4a, 0x0) 00:04:12 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, 0x0) 00:04:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 00:04:12 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:12 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, 0x0) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, 0x0) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 00:04:13 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, 0x0) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, 0x0) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, 0x0) 00:04:13 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, 0x0) 00:04:13 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, 0x0) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4d, 0x0) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b41, 0x0) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:04:13 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 00:04:13 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b41, 0x0) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, 0x0) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, 0x0) 00:04:13 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b41, 0x0) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 00:04:13 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, 0x0) 00:04:13 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b41, 0x0) 00:04:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:13 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b41, 0x0) 00:04:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:13 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b41, 0x0) 00:04:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:13 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) 00:04:13 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:13 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:13 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:13 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:13 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:13 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) 00:04:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:13 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:13 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, 0x0) 00:04:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:14 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 00:04:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, 0x0) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, 0x0) 00:04:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:14 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000}) 00:04:14 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, 0x0) 00:04:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, 0x0) 00:04:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:14 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) 00:04:14 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, 0x0) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, 0x0) 00:04:14 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) 00:04:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:14 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, 0x0) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000}) 00:04:14 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30001, 0x0) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, 0x0) 00:04:14 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b4b, 0x0) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000}) 00:04:14 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30001, 0x0) 00:04:14 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, 0x0) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:14 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30001, 0x0) 00:04:14 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, 0x0) 00:04:14 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000}) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) 00:04:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:04:14 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, 0x0) 00:04:14 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, 0x0) 00:04:14 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:04:14 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b49, 0x0) 00:04:14 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:04:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30001, 0x0) 00:04:14 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) 00:04:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30001, 0x0) 00:04:14 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 00:04:14 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:14 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30001, 0x0) 00:04:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 00:04:15 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:04:15 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, 0x0) 00:04:15 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:04:15 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:04:15 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:15 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, 0x0) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:15 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, 0x0) 00:04:15 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:15 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, 0x0) 00:04:15 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, 0x0) 00:04:15 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, 0x0) 00:04:15 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, 0x0) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, 0x0) 00:04:15 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:15 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, 0x0) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, 0x0) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:15 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, 0x0) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, 0x0) 00:04:15 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, 0x0) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, 0x0) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b47, 0x0) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, 0x0) 00:04:15 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, 0x0) 00:04:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:15 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, 0x0) 00:04:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, 0x0) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, 0x0) 00:04:16 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:16 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, 0x0) 00:04:16 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b45, 0x0) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) ioctl$KDDISABIO(r1, 0x4b37) 00:04:16 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, 0x0) 00:04:16 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, 0x0) 00:04:16 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:16 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:16 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, 0x0) 00:04:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, 0x0) 00:04:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, 0x0) 00:04:16 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:16 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:16 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:16 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$KDDISABIO(r1, 0x4b37) 00:04:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:16 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:17 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, 0x0) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x1c2, &(0x7f0000000280)}) 00:04:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, 0x0) 00:04:17 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, 0x0) 00:04:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000780)) ioctl$KDDISABIO(r1, 0x4b37) 00:04:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:17 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, 0x0) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, 0x0) 00:04:17 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, 0x0) 00:04:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, 0x0) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, 0x0) 00:04:17 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, 0x0) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:17 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, 0x0) 00:04:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, 0x0) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, 0x0) 00:04:17 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b30, 0x0) 00:04:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, 0x0) 00:04:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r3, 0x101002) write$midi(r2, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) 00:04:17 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r3, 0x101002) write$midi(r2, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) 00:04:17 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b2f, 0x0) 00:04:17 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r3 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r4, 0x101002) write$midi(r3, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$KDDISABIO(r2, 0x4b37) 00:04:17 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r3 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r4, 0x101002) write$midi(r3, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$KDDISABIO(r2, 0x4b37) 00:04:17 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r3, 0x101002) write$midi(r2, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) 00:04:17 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r3, 0x101002) write$midi(r2, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) 00:04:17 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000100)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:17 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r2 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r2, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r3, 0x101002) write$midi(r2, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) 00:04:17 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000100)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:17 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r3 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r4, 0x101002) write$midi(r3, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$KDDISABIO(r2, 0x4b37) 00:04:17 executing program 5: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000100)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) 00:04:17 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r3 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r4, 0x101002) write$midi(r3, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$KDDISABIO(r2, 0x4b37) 00:04:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) 00:04:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x0, &(0x7f0000000280)}) 00:04:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:17 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000100)) 00:04:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x16, 0x0, &(0x7f0000000280)}) 00:04:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:18 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 00:04:18 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:18 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)}) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:18 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) 00:04:18 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) 00:04:18 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/infiniband_srp', 0xe00, 0x4) 00:04:18 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:18 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:18 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) 00:04:18 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/124, 0x7c, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000e40)={{0x80000000, 0x0, 0x1, [0x5, 0x1]}, {0x80000000, 0x0, 0x0, [0x1, 0x9]}, 0x10000000, [0x20000, 0x8]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e80), 0x240, 0x0) 00:04:18 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) 00:04:18 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) 00:04:18 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) 00:04:18 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000e40)={{0x80000000, 0x0, 0x1, [0x5, 0x1]}, {0x80000000, 0x0, 0x0, [0x1, 0x9]}, 0x10000000, [0x20000, 0x8]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e80), 0x240, 0x0) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000e40)={{0x80000000, 0x0, 0x1, [0x5, 0x1]}, {0x80000000, 0x0, 0x0, [0x1, 0x9]}, 0x10000000, [0x20000, 0x8]}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e80), 0x240, 0x0) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000ec0)) 00:04:18 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) 00:04:18 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) 00:04:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000e40)={{0x80000000, 0x0, 0x1, [0x5, 0x1]}, {0x80000000, 0x0, 0x0, [0x1, 0x9]}, 0x10000000, [0x20000, 0x8]}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e80), 0x240, 0x0) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000ec0)) 00:04:18 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) 00:04:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000e40)={{0x80000000, 0x0, 0x1, [0x5, 0x1]}, {0x80000000, 0x0, 0x0, [0x1, 0x9]}, 0x10000000, [0x20000, 0x8]}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e80), 0x240, 0x0) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000ec0)) ioctl$KDDISABIO(r1, 0x4b37) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, 0x20, 0x9}, 0x48) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x200, 0xb7, 0x9, 0x8, 0x6b, "5ca6821dceeab6e129e8294e974ccdcb2eee20", 0x9, 0x8}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x12300, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000200)={0x1, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x16, 0x1c2, &(0x7f0000000280)}) r4 = syz_open_dev$dmmidi(&(0x7f00000006c0), 0x1f, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000700)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0x80}, 0x8) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r4, 0x8004af79, &(0x7f0000000780)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000007c0)={0x7}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000800)={0x6, r1, 0x1}) syz_open_pts(r5, 0x101002) write$midi(r4, &(0x7f0000000840)="5b3d57030d51826eabd2703f89fcc56a39b25b4eb80787321261d320942b928fdc147ad21241d27401c875fa975f8f4c455adc7705d467e1a67bbd17cddd0a1fc1a3b43666fdffd38b53639a0dad11ff7ef96bfff312f2c18da3c490d9f208115992cc7558756afee3347171616b8833d9fd12273e19193af858a810210dfb4b2c81fe2a163d03dc72dbe9aaa07be9e9571a661ea7829e747d74cd1c711e4408a49872d7e02b205adf55d1992d530a071fa14b6f91f734c3899982db97d25aef650d81a9713fccabc78f75c100d6835365e9", 0xd2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000940)=0x7f) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000980)={0x2, 0x43}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) ioctl$KDDISABIO(r3, 0x4b37) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000dc0)={0x1, 0x1, 0x20, 0x13, 0x1c4, &(0x7f00000009c0)}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000e40)={{0x80000000, 0x0, 0x1, [0x5, 0x1]}, {0x80000000, 0x0, 0x0, [0x1, 0x9]}, 0x10000000, [0x20000, 0x8]}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000e80), 0x240, 0x0) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000ec0)) ioctl$KDDISABIO(r1, 0x4b37) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x1c2, &(0x7f0000000280)}) 00:04:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (fail_nth: 1) 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 00:04:18 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) [ 258.892286][ T1161] FAULT_INJECTION: forcing a failure. [ 258.892286][ T1161] name failslab, interval 1, probability 0, space 0, times 0 [ 258.907992][ T1161] CPU: 1 PID: 1161 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 258.910404][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 258.912647][ T1161] Call trace: [ 258.913353][ T1161] dump_backtrace+0x1b8/0x1e4 [ 258.914415][ T1161] show_stack+0x2c/0x3c [ 258.915314][ T1161] dump_stack_lvl+0xd0/0x124 [ 258.916412][ T1161] dump_stack+0x1c/0x28 [ 258.917308][ T1161] should_fail_ex+0x3b0/0x50c [ 258.918382][ T1161] __should_failslab+0xc8/0x128 [ 258.919466][ T1161] should_failslab+0x10/0x28 [ 258.920504][ T1161] __kmem_cache_alloc_node+0x80/0x368 [ 258.921731][ T1161] __kmalloc+0xb8/0x1b8 [ 258.922664][ T1161] tomoyo_realpath_from_path+0xc8/0x4cc [ 258.923851][ T1161] tomoyo_path_number_perm+0x1ec/0x6a8 [ 258.925126][ T1161] tomoyo_file_ioctl+0x2c/0x3c [ 258.926167][ T1161] security_file_ioctl+0x80/0xbc [ 258.927340][ T1161] __arm64_sys_ioctl+0xa8/0x1c8 [ 258.928316][ T1163] FAULT_INJECTION: forcing a failure. [ 258.928316][ T1163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.928438][ T1161] invoke_syscall+0x98/0x2b8 [ 258.932723][ T1161] el0_svc_common+0x130/0x23c [ 258.933711][ T1161] do_el0_svc+0x48/0x58 [ 258.934623][ T1161] el0_svc+0x54/0x158 [ 258.935536][ T1161] el0t_64_sync_handler+0x84/0xfc [ 258.936657][ T1161] el0t_64_sync+0x190/0x194 [ 258.938861][ T1163] CPU: 0 PID: 1163 Comm: syz-executor.4 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 258.941242][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 00:04:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (fail_nth: 1) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) [ 258.943654][ T1163] Call trace: [ 258.943662][ T1163] dump_backtrace+0x1b8/0x1e4 [ 258.943680][ T1163] show_stack+0x2c/0x3c [ 258.943690][ T1163] dump_stack_lvl+0xd0/0x124 [ 258.943706][ T1163] dump_stack+0x1c/0x28 [ 258.943718][ T1163] should_fail_ex+0x3b0/0x50c [ 258.943731][ T1163] should_fail+0x14/0x24 [ 258.943741][ T1163] should_fail_usercopy+0x20/0x30 [ 258.943753][ T1163] simple_read_from_buffer+0xd4/0x248 [ 258.943765][ T1163] proc_fail_nth_read+0x134/0x1a0 [ 258.943779][ T1163] vfs_read+0x284/0x8a4 [ 258.943790][ T1163] ksys_read+0x15c/0x26c [ 258.943801][ T1163] __arm64_sys_read+0x7c/0x90 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 258.943812][ T1163] invoke_syscall+0x98/0x2b8 [ 258.943825][ T1163] el0_svc_common+0x130/0x23c 00:04:18 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0) [ 258.943838][ T1163] do_el0_svc+0x48/0x58 [ 258.943850][ T1163] el0_svc+0x54/0x158 [ 258.943863][ T1163] el0t_64_sync_handler+0x84/0xfc [ 258.943876][ T1163] el0t_64_sync+0x190/0x194 [ 258.957237][ T1161] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.013440][ T1172] FAULT_INJECTION: forcing a failure. [ 259.013440][ T1172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.013466][ T1172] CPU: 0 PID: 1172 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.013508][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.013516][ T1172] Call trace: [ 259.013519][ T1172] dump_backtrace+0x1b8/0x1e4 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x0, 0x0) [ 259.013535][ T1172] show_stack+0x2c/0x3c [ 259.013544][ T1172] dump_stack_lvl+0xd0/0x124 [ 259.013559][ T1172] dump_stack+0x1c/0x28 [ 259.013571][ T1172] should_fail_ex+0x3b0/0x50c [ 259.013583][ T1172] should_fail+0x14/0x24 [ 259.013594][ T1172] should_fail_usercopy+0x20/0x30 [ 259.013606][ T1172] simple_read_from_buffer+0xd4/0x248 [ 259.013618][ T1172] proc_fail_nth_read+0x134/0x1a0 [ 259.013632][ T1172] vfs_read+0x284/0x8a4 [ 259.013643][ T1172] ksys_read+0x15c/0x26c [ 259.013653][ T1172] __arm64_sys_read+0x7c/0x90 [ 259.013664][ T1172] invoke_syscall+0x98/0x2b8 [ 259.013678][ T1172] el0_svc_common+0x130/0x23c [ 259.013690][ T1172] do_el0_svc+0x48/0x58 [ 259.013703][ T1172] el0_svc+0x54/0x158 [ 259.013715][ T1172] el0t_64_sync_handler+0x84/0xfc [ 259.013728][ T1172] el0t_64_sync+0x190/0x194 [ 259.043639][ T1176] FAULT_INJECTION: forcing a failure. [ 259.043639][ T1176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.043664][ T1176] CPU: 1 PID: 1176 Comm: syz-executor.0 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.043678][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x1000000000000, 0x0, 0x0, 0x0) [ 259.043686][ T1176] Call trace: [ 259.043689][ T1176] dump_backtrace+0x1b8/0x1e4 [ 259.043704][ T1176] show_stack+0x2c/0x3c [ 259.043714][ T1176] dump_stack_lvl+0xd0/0x124 [ 259.043728][ T1176] dump_stack+0x1c/0x28 [ 259.043740][ T1176] should_fail_ex+0x3b0/0x50c [ 259.043752][ T1176] should_fail+0x14/0x24 [ 259.043763][ T1176] should_fail_usercopy+0x20/0x30 [ 259.043775][ T1176] simple_read_from_buffer+0xd4/0x248 [ 259.043787][ T1176] proc_fail_nth_read+0x134/0x1a0 [ 259.043800][ T1176] vfs_read+0x284/0x8a4 [ 259.043811][ T1176] ksys_read+0x15c/0x26c [ 259.043822][ T1176] __arm64_sys_read+0x7c/0x90 [ 259.043833][ T1176] invoke_syscall+0x98/0x2b8 [ 259.043846][ T1176] el0_svc_common+0x130/0x23c [ 259.043859][ T1176] do_el0_svc+0x48/0x58 [ 259.043872][ T1176] el0_svc+0x54/0x158 [ 259.043884][ T1176] el0t_64_sync_handler+0x84/0xfc 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) [ 259.043897][ T1176] el0t_64_sync+0x190/0x194 00:04:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (fail_nth: 1) 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:19 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) 00:04:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (fail_nth: 2) 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) [ 259.248273][ T1188] FAULT_INJECTION: forcing a failure. [ 259.248273][ T1188] name failslab, interval 1, probability 0, space 0, times 0 [ 259.262305][ T1188] CPU: 1 PID: 1188 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.264538][ T1188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.264548][ T1188] Call trace: [ 259.264552][ T1188] dump_backtrace+0x1b8/0x1e4 [ 259.264569][ T1188] show_stack+0x2c/0x3c [ 259.264578][ T1188] dump_stack_lvl+0xd0/0x124 [ 259.264592][ T1188] dump_stack+0x1c/0x28 [ 259.264604][ T1188] should_fail_ex+0x3b0/0x50c [ 259.264617][ T1188] __should_failslab+0xc8/0x128 [ 259.264631][ T1188] should_failslab+0x10/0x28 [ 259.264641][ T1188] __kmem_cache_alloc_node+0x80/0x368 [ 259.264653][ T1188] __kmalloc+0xb8/0x1b8 [ 259.264666][ T1188] tomoyo_encode+0x270/0x4b0 [ 259.264679][ T1188] tomoyo_realpath_from_path+0x478/0x4cc [ 259.264691][ T1188] tomoyo_path_number_perm+0x1ec/0x6a8 [ 259.264703][ T1188] tomoyo_file_ioctl+0x2c/0x3c [ 259.264716][ T1188] security_file_ioctl+0x80/0xbc [ 259.264728][ T1188] __arm64_sys_ioctl+0xa8/0x1c8 [ 259.264738][ T1188] invoke_syscall+0x98/0x2b8 [ 259.264752][ T1188] el0_svc_common+0x130/0x23c [ 259.264764][ T1188] do_el0_svc+0x48/0x58 [ 259.264777][ T1188] el0_svc+0x54/0x158 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2, 0x0) [ 259.264790][ T1188] el0t_64_sync_handler+0x84/0xfc [ 259.288891][ T1188] el0t_64_sync+0x190/0x194 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0) [ 259.325723][ T1200] FAULT_INJECTION: forcing a failure. [ 259.325723][ T1200] name failslab, interval 1, probability 0, space 0, times 0 [ 259.328719][ T1200] CPU: 1 PID: 1200 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.330814][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 00:04:19 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) [ 259.333076][ T1200] Call trace: [ 259.333083][ T1200] dump_backtrace+0x1b8/0x1e4 [ 259.333099][ T1200] show_stack+0x2c/0x3c [ 259.333109][ T1200] dump_stack_lvl+0xd0/0x124 [ 259.333123][ T1200] dump_stack+0x1c/0x28 [ 259.333136][ T1200] should_fail_ex+0x3b0/0x50c [ 259.333149][ T1200] __should_failslab+0xc8/0x128 [ 259.333163][ T1200] should_failslab+0x10/0x28 [ 259.333172][ T1200] __kmem_cache_alloc_node+0x80/0x368 [ 259.333186][ T1200] __kmalloc+0xb8/0x1b8 [ 259.333199][ T1200] tomoyo_realpath_from_path+0xc8/0x4cc [ 259.333212][ T1200] tomoyo_path_number_perm+0x1ec/0x6a8 [ 259.333224][ T1200] tomoyo_file_ioctl+0x2c/0x3c [ 259.333237][ T1200] security_file_ioctl+0x80/0xbc [ 259.333249][ T1200] __arm64_sys_ioctl+0xa8/0x1c8 [ 259.333260][ T1200] invoke_syscall+0x98/0x2b8 [ 259.333273][ T1200] el0_svc_common+0x130/0x23c [ 259.333286][ T1200] do_el0_svc+0x48/0x58 [ 259.333298][ T1200] el0_svc+0x54/0x158 [ 259.333311][ T1200] el0t_64_sync_handler+0x84/0xfc [ 259.333324][ T1200] el0t_64_sync+0x190/0x194 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x10, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 259.338675][ T1200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.363196][ T1188] ERROR: Out of memory at tomoyo_realpath_from_path. 00:04:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (fail_nth: 3) [ 259.410399][ T1208] FAULT_INJECTION: forcing a failure. [ 259.410399][ T1208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.426777][ T1208] CPU: 1 PID: 1208 Comm: syz-executor.3 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.429033][ T1208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.431278][ T1208] Call trace: [ 259.432024][ T1208] dump_backtrace+0x1b8/0x1e4 [ 259.433133][ T1208] show_stack+0x2c/0x3c [ 259.434044][ T1208] dump_stack_lvl+0xd0/0x124 [ 259.435109][ T1208] dump_stack+0x1c/0x28 [ 259.436103][ T1208] should_fail_ex+0x3b0/0x50c [ 259.437138][ T1208] should_fail+0x14/0x24 [ 259.438121][ T1208] should_fail_usercopy+0x20/0x30 [ 259.439286][ T1208] simple_read_from_buffer+0xd4/0x248 [ 259.440619][ T1208] proc_fail_nth_read+0x134/0x1a0 [ 259.441814][ T1208] vfs_read+0x284/0x8a4 [ 259.442758][ T1208] ksys_read+0x15c/0x26c [ 259.443659][ T1208] __arm64_sys_read+0x7c/0x90 [ 259.444679][ T1208] invoke_syscall+0x98/0x2b8 [ 259.445803][ T1208] el0_svc_common+0x130/0x23c [ 259.446882][ T1208] do_el0_svc+0x48/0x58 [ 259.447898][ T1208] el0_svc+0x54/0x158 [ 259.448841][ T1208] el0t_64_sync_handler+0x84/0xfc 00:04:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (fail_nth: 2) 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x10, 0x0) 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x1000000000000, 0x0, 0x0) 00:04:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 259.449896][ T1208] el0t_64_sync+0x190/0x194 [ 259.479571][ T1216] FAULT_INJECTION: forcing a failure. [ 259.479571][ T1216] name failslab, interval 1, probability 0, space 0, times 0 [ 259.487654][ T1218] FAULT_INJECTION: forcing a failure. [ 259.487654][ T1218] name failslab, interval 1, probability 0, space 0, times 0 [ 259.490541][ T1218] CPU: 1 PID: 1218 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.492696][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.495144][ T1218] Call trace: [ 259.495844][ T1218] dump_backtrace+0x1b8/0x1e4 [ 259.496889][ T1218] show_stack+0x2c/0x3c [ 259.497806][ T1218] dump_stack_lvl+0xd0/0x124 [ 259.498905][ T1218] dump_stack+0x1c/0x28 [ 259.499886][ T1218] should_fail_ex+0x3b0/0x50c [ 259.500977][ T1218] __should_failslab+0xc8/0x128 [ 259.502038][ T1218] should_failslab+0x10/0x28 [ 259.503016][ T1218] __kmem_cache_alloc_node+0x80/0x368 [ 259.504274][ T1218] __kmalloc+0xb8/0x1b8 [ 259.505177][ T1218] tomoyo_encode+0x270/0x4b0 [ 259.506179][ T1218] tomoyo_realpath_from_path+0x478/0x4cc [ 259.507340][ T1218] tomoyo_path_number_perm+0x1ec/0x6a8 [ 259.508544][ T1218] tomoyo_file_ioctl+0x2c/0x3c [ 259.509614][ T1218] security_file_ioctl+0x80/0xbc [ 259.510714][ T1218] __arm64_sys_ioctl+0xa8/0x1c8 [ 259.511890][ T1218] invoke_syscall+0x98/0x2b8 [ 259.512789][ T1218] el0_svc_common+0x130/0x23c [ 259.513866][ T1218] do_el0_svc+0x48/0x58 [ 259.514739][ T1218] el0_svc+0x54/0x158 [ 259.515690][ T1218] el0t_64_sync_handler+0x84/0xfc [ 259.516884][ T1218] el0t_64_sync+0x190/0x194 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) [ 259.525444][ T1216] CPU: 0 PID: 1216 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.527793][ T1216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.530026][ T1216] Call trace: [ 259.530559][ T1216] dump_backtrace+0x1b8/0x1e4 [ 259.531341][ T1216] show_stack+0x2c/0x3c [ 259.532021][ T1216] dump_stack_lvl+0xd0/0x124 [ 259.532784][ T1216] dump_stack+0x1c/0x28 [ 259.533460][ T1216] should_fail_ex+0x3b0/0x50c [ 259.534225][ T1216] __should_failslab+0xc8/0x128 [ 259.535020][ T1216] should_failslab+0x10/0x28 [ 259.535785][ T1216] __kmem_cache_alloc_node+0x80/0x368 [ 259.536718][ T1216] __kmalloc+0xb8/0x1b8 [ 259.537600][ T1216] tomoyo_realpath_from_path+0xc8/0x4cc [ 259.538988][ T1216] tomoyo_path_number_perm+0x1ec/0x6a8 [ 259.539004][ T1216] tomoyo_file_ioctl+0x2c/0x3c [ 259.539017][ T1216] security_file_ioctl+0x80/0xbc [ 259.539029][ T1216] __arm64_sys_ioctl+0xa8/0x1c8 [ 259.539040][ T1216] invoke_syscall+0x98/0x2b8 [ 259.539053][ T1216] el0_svc_common+0x130/0x23c [ 259.539066][ T1216] do_el0_svc+0x48/0x58 [ 259.539078][ T1216] el0_svc+0x54/0x158 00:04:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) [ 259.539091][ T1216] el0t_64_sync_handler+0x84/0xfc [ 259.539104][ T1216] el0t_64_sync+0x190/0x194 [ 259.556001][ T1216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.575015][ T1218] ERROR: Out of memory at tomoyo_realpath_from_path. 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (fail_nth: 3) 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) 00:04:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000) 00:04:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2, 0x0) [ 259.649051][ T1235] FAULT_INJECTION: forcing a failure. 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, 0x0) [ 259.649051][ T1235] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 259.659957][ T1235] CPU: 1 PID: 1235 Comm: syz-executor.1 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.662277][ T1235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.664569][ T1235] Call trace: [ 259.665258][ T1235] dump_backtrace+0x1b8/0x1e4 [ 259.666301][ T1235] show_stack+0x2c/0x3c [ 259.667245][ T1235] dump_stack_lvl+0xd0/0x124 [ 259.668337][ T1235] dump_stack+0x1c/0x28 [ 259.669266][ T1235] should_fail_ex+0x3b0/0x50c [ 259.670431][ T1235] should_fail+0x14/0x24 [ 259.671384][ T1235] should_fail_usercopy+0x20/0x30 [ 259.672594][ T1235] simple_read_from_buffer+0xd4/0x248 [ 259.673939][ T1235] proc_fail_nth_read+0x134/0x1a0 [ 259.675062][ T1235] vfs_read+0x284/0x8a4 [ 259.676019][ T1235] ksys_read+0x15c/0x26c [ 259.676854][ T1235] __arm64_sys_read+0x7c/0x90 [ 259.678065][ T1235] invoke_syscall+0x98/0x2b8 [ 259.679109][ T1235] el0_svc_common+0x130/0x23c [ 259.679125][ T1235] do_el0_svc+0x48/0x58 [ 259.679138][ T1235] el0_svc+0x54/0x158 [ 259.679153][ T1235] el0t_64_sync_handler+0x84/0xfc [ 259.679166][ T1235] el0t_64_sync+0x190/0x194 [ 259.700323][ T1238] FAULT_INJECTION: forcing a failure. [ 259.700323][ T1238] name failslab, interval 1, probability 0, space 0, times 0 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x10, 0x0) [ 259.716468][ T1238] CPU: 0 PID: 1238 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.718777][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.718788][ T1238] Call trace: [ 259.718792][ T1238] dump_backtrace+0x1b8/0x1e4 [ 259.718807][ T1238] show_stack+0x2c/0x3c [ 259.718817][ T1238] dump_stack_lvl+0xd0/0x124 [ 259.718831][ T1238] dump_stack+0x1c/0x28 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000) 00:04:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) [ 259.718843][ T1238] should_fail_ex+0x3b0/0x50c [ 259.718857][ T1238] __should_failslab+0xc8/0x128 [ 259.718870][ T1238] should_failslab+0x10/0x28 [ 259.718880][ T1238] __kmem_cache_alloc_node+0x80/0x368 [ 259.718892][ T1238] __kmalloc+0xb8/0x1b8 [ 259.718905][ T1238] tomoyo_encode+0x270/0x4b0 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) [ 259.718918][ T1238] tomoyo_realpath_from_path+0x478/0x4cc [ 259.718931][ T1238] tomoyo_path_number_perm+0x1ec/0x6a8 [ 259.718942][ T1238] tomoyo_file_ioctl+0x2c/0x3c [ 259.718955][ T1238] security_file_ioctl+0x80/0xbc [ 259.718967][ T1238] __arm64_sys_ioctl+0xa8/0x1c8 [ 259.718978][ T1238] invoke_syscall+0x98/0x2b8 [ 259.718991][ T1238] el0_svc_common+0x130/0x23c [ 259.719004][ T1238] do_el0_svc+0x48/0x58 [ 259.719016][ T1238] el0_svc+0x54/0x158 [ 259.719029][ T1238] el0t_64_sync_handler+0x84/0xfc [ 259.719043][ T1238] el0t_64_sync+0x190/0x194 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) [ 259.740603][ T1238] ERROR: Out of memory at tomoyo_realpath_from_path. 00:04:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, 0x0) 00:04:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 00:04:19 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000040)={0x9, 0xe0, "18c08fb4eb5d0b3580867791adba50d83eb375fba82a7564acdc6b25a243b71f2516dcc062b310ed6926ffa32e45020159af1ef2dad5116a3e8c14362aa25ab8a4dc800ca8ec043c7b44c158dfa7299e9107e845519d553d52cb241aa635dba58a219905c3845425eb50c70c2aa5bec87574407254be4838341597ebad63964bc4925adedda727e657ad0369434a2cbbef6baad75d3105b6c6f459fb01e8d7d9e90e8f9e98f215785ac08cad390127f097f5f38bf9eecb761639f0c4ffd522efc141590bf37a16ae5958b5821fc3374ed92c82315f41c6d8ae01335080b75b8c"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000240)={0x1, 0xf80}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x4, 0x40000000, 0x9, 0x1, 0x4, "55e7a56f1ec9d21e6bb220da161470443fe723"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x6, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x2, 0xfffffff7, 0x2b}, {@loopback, 0x4e22, 0x2000, 0x2, 0x800, 0x7}}, 0x44) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1c) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) 00:04:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, 0x0) 00:04:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, 0x0) [ 259.949257][ T1271] FAULT_INJECTION: forcing a failure. [ 259.949257][ T1271] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) [ 259.962124][ T1271] CPU: 0 PID: 1271 Comm: syz-executor.2 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 259.962147][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 259.962155][ T1271] Call trace: 00:04:19 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=""/155, 0x9b, 0x120, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @local, 0x1060}}, 0x24) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x0, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffc1}, r1}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x12}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000180)='\xff\xff\\\xe7\rU\xae\x811nf\x90\x1e\xc0\xbf\xeb\xc8L\x00c\xa6\xf3\'\xed\xb5L/X\xe0\xdf\x8b\b+\x9a\v\xc7t\xad\xd1\x9c\x145\xfc\xb1\xda1\x8d\xd7l\x91\xec\x19', 0x34) [ 259.962158][ T1271] dump_backtrace+0x1b8/0x1e4 [ 259.962174][ T1271] show_stack+0x2c/0x3c [ 259.962183][ T1271] dump_stack_lvl+0xd0/0x124 [ 259.962198][ T1271] dump_stack+0x1c/0x28 [ 259.962209][ T1271] should_fail_ex+0x3b0/0x50c [ 259.962222][ T1271] should_fail+0x14/0x24 [ 259.962232][ T1271] should_fail_usercopy+0x20/0x30 [ 259.962244][ T1271] simple_read_from_buffer+0xd4/0x248 [ 259.962256][ T1271] proc_fail_nth_read+0x134/0x1a0 [ 259.962269][ T1271] vfs_read+0x284/0x8a4 [ 259.962280][ T1271] ksys_read+0x15c/0x26c [ 259.962291][ T1271] __arm64_sys_read+0x7c/0x90 [ 259.962302][ T1271] invoke_syscall+0x98/0x2b8 [ 259.962316][ T1271] el0_svc_common+0x130/0x23c [ 259.962328][ T1271] do_el0_svc+0x48/0x58 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=""/155, 0x9b, 0x120, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @local, 0x1060}}, 0x24) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x0, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffc1}, r1}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x12}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000180)='\xff\xff\\\xe7\rU\xae\x811nf\x90\x1e\xc0\xbf\xeb\xc8L\x00c\xa6\xf3\'\xed\xb5L/X\xe0\xdf\x8b\b+\x9a\v\xc7t\xad\xd1\x9c\x145\xfc\xb1\xda1\x8d\xd7l\x91\xec\x19', 0x34) [ 259.962341][ T1271] el0_svc+0x54/0x158 [ 259.962353][ T1271] el0t_64_sync_handler+0x84/0xfc [ 259.962366][ T1271] el0t_64_sync+0x190/0x194 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000040)={0x9, 0xe0, "18c08fb4eb5d0b3580867791adba50d83eb375fba82a7564acdc6b25a243b71f2516dcc062b310ed6926ffa32e45020159af1ef2dad5116a3e8c14362aa25ab8a4dc800ca8ec043c7b44c158dfa7299e9107e845519d553d52cb241aa635dba58a219905c3845425eb50c70c2aa5bec87574407254be4838341597ebad63964bc4925adedda727e657ad0369434a2cbbef6baad75d3105b6c6f459fb01e8d7d9e90e8f9e98f215785ac08cad390127f097f5f38bf9eecb761639f0c4ffd522efc141590bf37a16ae5958b5821fc3374ed92c82315f41c6d8ae01335080b75b8c"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000240)={0x1, 0xf80}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x4, 0x40000000, 0x9, 0x1, 0x4, "55e7a56f1ec9d21e6bb220da161470443fe723"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x6, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x2, 0xfffffff7, 0x2b}, {@loopback, 0x4e22, 0x2000, 0x2, 0x800, 0x7}}, 0x44) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, 0x0) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, 0x0) 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=""/155, 0x9b, 0x120, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @local, 0x1060}}, 0x24) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x0, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffc1}, r1}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x106, 0x12}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x12}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000180)='\xff\xff\\\xe7\rU\xae\x811nf\x90\x1e\xc0\xbf\xeb\xc8L\x00c\xa6\xf3\'\xed\xb5L/X\xe0\xdf\x8b\b+\x9a\v\xc7t\xad\xd1\x9c\x145\xfc\xb1\xda1\x8d\xd7l\x91\xec\x19', 0x34) (async) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000180)='\xff\xff\\\xe7\rU\xae\x811nf\x90\x1e\xc0\xbf\xeb\xc8L\x00c\xa6\xf3\'\xed\xb5L/X\xe0\xdf\x8b\b+\x9a\v\xc7t\xad\xd1\x9c\x145\xfc\xb1\xda1\x8d\xd7l\x91\xec\x19', 0x34) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, 0x0) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x10, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x17, 0x10122, 0x0, 0x3c) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:20 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000040)={0x9, 0xe0, "18c08fb4eb5d0b3580867791adba50d83eb375fba82a7564acdc6b25a243b71f2516dcc062b310ed6926ffa32e45020159af1ef2dad5116a3e8c14362aa25ab8a4dc800ca8ec043c7b44c158dfa7299e9107e845519d553d52cb241aa635dba58a219905c3845425eb50c70c2aa5bec87574407254be4838341597ebad63964bc4925adedda727e657ad0369434a2cbbef6baad75d3105b6c6f459fb01e8d7d9e90e8f9e98f215785ac08cad390127f097f5f38bf9eecb761639f0c4ffd522efc141590bf37a16ae5958b5821fc3374ed92c82315f41c6d8ae01335080b75b8c"}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000240)={0x1, 0xf80}) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x4, 0x40000000, 0x9, 0x1, 0x4, "55e7a56f1ec9d21e6bb220da161470443fe723"}) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x6, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x2, 0xfffffff7, 0x2b}, {@loopback, 0x4e22, 0x2000, 0x2, 0x800, 0x7}}, 0x44) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, 0x0) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x17, 0x10122, 0x0, 0x3c) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, 0x0) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, 0x0) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x17, 0x10122, 0x0, 0x3c) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, 0x0) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, 0x0) 00:04:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0xfffffc00) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000040)='-\x00') ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x30300, 0x188) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0xfffffc00) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000040)='-\x00') ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0xfffffc00) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000040)='-\x00') (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, 0x0) 00:04:20 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x30300, 0x188) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x30300, 0x188) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, 0x0) 00:04:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0xfffffc00) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000040)='-\x00') (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:20 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x30300, 0x188) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x30300, 0x188) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, 0x0) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, 0x0) 00:04:20 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pwc', 0xc00, 0xea) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x1ff, r2, 0x80003}) 00:04:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @broadcast}}}, 0x118) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, 0x0) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, 0x0) 00:04:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @broadcast}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @broadcast}}}, 0x118) 00:04:20 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pwc', 0xc00, 0xea) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x1ff, r2, 0x80003}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pwc', 0xc00, 0xea) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x1ff, r2, 0x80003}) (async) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @broadcast}}}, 0x118) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, 0x0) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pwc', 0xc00, 0xea) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x1ff, r2, 0x80003}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pwc', 0xc00, 0xea) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x1ff, r2, 0x80003}) (async) 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x5c, 0x35dfebd7793210c1, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000000c0)=']}+(+@\x00', 0x7) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) write$eventfd(r1, &(0x7f0000000080), 0x8) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, 0x0) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x5c, 0x35dfebd7793210c1, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet(0x2, 0x3, 0x6) (rerun: 64) accept4$inet(r0, 0x0, 0x0, 0x0) (async) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000000c0)=']}+(+@\x00', 0x7) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) write$eventfd(r1, &(0x7f0000000080), 0x8) 00:04:20 executing program 1: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, 0x0) 00:04:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, 0x0) 00:04:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:20 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x5c, 0x35dfebd7793210c1, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) (async) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000000c0)=']}+(+@\x00', 0x7) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) write$eventfd(r1, &(0x7f0000000080), 0x8) 00:04:21 executing program 1: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dm_clone', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 00:04:21 executing program 1: syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dm_clone', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dm_clone', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) (async) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) (async) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:21 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dm_clone', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/dm_clone', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) (async) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) (async) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b62, 0x0) 00:04:21 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b62, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) 00:04:21 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, 0x0) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) (async) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b64, 0x0) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b64, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) 00:04:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, 0x0) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0xc, 0x172, &(0x7f0000000040)}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x2, 0x1], 0x2) socket$l2tp(0x2, 0x2, 0x73) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000880)={0xad, 0x4, &(0x7f0000000480)="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"}) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) (rerun: 64) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0xc, 0x172, &(0x7f0000000040)}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x2, 0x1], 0x2) (async) socket$l2tp(0x2, 0x2, 0x73) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000880)={0xad, 0x4, &(0x7f0000000480)="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"}) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b62, 0x0) 00:04:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x200, 0x800003, 0x8, 0x40, 0xfd, "d33800", 0x1, 0x1ff}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 00:04:21 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0xc, 0x172, &(0x7f0000000040)}) (async, rerun: 64) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x2, 0x1], 0x2) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000880)={0xad, 0x4, &(0x7f0000000480)="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"}) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b62, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8041) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, 0x0) 00:04:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x200, 0x800003, 0x8, 0x40, 0xfd, "d33800", 0x1, 0x1ff}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8041) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b64, 0x0) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x200, 0x800003, 0x8, 0x40, 0xfd, "d33800", 0x1, 0x1ff}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b64, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8041) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, 0x0) 00:04:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0) 00:04:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, 0x0) 00:04:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_vidtv_bridge', 0x2000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb', 0x141440, 0x2c) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000080), &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r2, &(0x7f00000001c0), &(0x7f00000000c0)=[{{0x80000000, 0x0}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x7, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000ac0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000c80)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @initdev}, &(0x7f0000000300)=0xc) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000cc0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x22f, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x4, [0x3, 0x80000001]}, {0x80000000, r3, 0x4, [0x1000, 0x5]}, 0x10000000, [0x7, 0x2]}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010103, 0x0, 0x0) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, 0x0) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 00:04:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_vidtv_bridge', 0x2000, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb', 0x141440, 0x2c) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000080), &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r2, &(0x7f00000001c0), &(0x7f00000000c0)=[{{0x80000000, 0x0}}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x7, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000ac0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000c80)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @initdev}, &(0x7f0000000300)=0xc) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000cc0)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x22f, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) (async) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x4, [0x3, 0x80000001]}, {0x80000000, r3, 0x4, [0x1000, 0x5]}, 0x10000000, [0x7, 0x2]}) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010103, 0x0, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, 0x0) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/dvb_vidtv_bridge', 0x2000, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb', 0x141440, 0x2c) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000080), &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000140)={r2, &(0x7f00000001c0), &(0x7f00000000c0)=[{{0x80000000, 0x0}}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x7, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000ac0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000c80)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @initdev}, &(0x7f0000000300)=0xc) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000cc0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x22f, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) (async) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000180)={{0x80000000, 0x0, 0x4, [0x3, 0x80000001]}, {0x80000000, r3, 0x4, [0x1000, 0x5]}, 0x10000000, [0x7, 0x2]}) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010103, 0x0, 0x0) 00:04:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000680)={0x1}) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1004}, 0x4084) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40041) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x20, 0xc, 0x1b, &(0x7f0000000040)}) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, 0x0) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000080)) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000680)={0x1}) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1004}, 0x4084) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) (async, rerun: 32) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) (async, rerun: 32) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40041) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x20, 0xc, 0x1b, &(0x7f0000000040)}) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, 0x0) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, 0x0) 00:04:22 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000080)) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000080)) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000680)={0x1}) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1004}, 0x4084) (async, rerun: 64) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40041) (async, rerun: 32) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x20, 0xc, 0x1b, &(0x7f0000000040)}) (rerun: 32) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, 0x0) 00:04:22 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000080)) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, 0x0) 00:04:22 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40012062, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x0, 0x4], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x104], 0x2) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, 0x0) 00:04:22 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40012062, 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x0, 0x4], 0x2) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x104], 0x2) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, 0x0) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40012062, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x0, 0x4], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x104], 0x2) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, 0x0) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, 0x0) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x1000) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/gspca_gl860', 0x20000, 0x40) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5413, 0x0) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/gspca_gl860', 0x20000, 0x40) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, 0x0) 00:04:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x1000) (async) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5413, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/gspca_gl860', 0x20000, 0x40) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:04:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, 0x0) 00:04:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, 0x0) 00:04:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, 0x0) 00:04:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x1000) 00:04:23 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, 0x0) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, 0x0) 00:04:23 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xffffebd0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x24) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, 0x0) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xffffebd0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x24) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, 0x0) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xffffebd0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x24) 00:04:23 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5413, 0x0) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, 0x0) 00:04:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000)=[{0x80000000}], &(0x7f0000000040)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{r1, 0x0, 0x5, [0x7, 0x1]}, {0x80000000, r2, 0x5, [0x3, 0xffffd4b1]}, 0x4, [0x800, 0x3ff]}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x3, 0x8, 0x7, 0x7f, 0x7, "ff54c7560828709a451c89014b26c5b604b6bc", 0xfffffc00, 0x100}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5413, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, 0x0) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, 0x0) 00:04:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000)=[{0x80000000}], &(0x7f0000000040)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{r1, 0x0, 0x5, [0x7, 0x1]}, {0x80000000, r2, 0x5, [0x3, 0xffffd4b1]}, 0x4, [0x800, 0x3ff]}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{r1, 0x0, 0x5, [0x7, 0x1]}, {0x80000000, r2, 0x5, [0x3, 0xffffd4b1]}, 0x4, [0x800, 0x3ff]}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, 0x0) 00:04:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x3, 0x8, 0x7, 0x7f, 0x7, "ff54c7560828709a451c89014b26c5b604b6bc", 0xfffffc00, 0x100}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x3, 0x8, 0x7, 0x7f, 0x7, "ff54c7560828709a451c89014b26c5b604b6bc", 0xfffffc00, 0x100}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, 0x0) 00:04:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000)=[{0x80000000}], &(0x7f0000000040)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{r1, 0x0, 0x5, [0x7, 0x1]}, {0x80000000, r2, 0x5, [0x3, 0xffffd4b1]}, 0x4, [0x800, 0x3ff]}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x3, 0x8, 0x7, 0x7f, 0x7, "ff54c7560828709a451c89014b26c5b604b6bc", 0xfffffc00, 0x100}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, 0x0) 00:04:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/cs_system_cfg', 0xc0800, 0xea) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000000)={0x9, r0, 0x80000}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000040)={0x1, 0x3}) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000000c0)) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x4) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x484200, 0x0) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/cs_system_cfg', 0xc0800, 0xea) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000000)={0x9, r0, 0x80000}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000040)={0x1, 0x3}) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000000c0)) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$I2C_PEC(r2, 0x708, 0x4) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, 0x0) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5417, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x484200, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x484200, 0x0) (async) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/cs_system_cfg', 0xc0800, 0xea) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000000)={0x9, r0, 0x80000}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r2, 0x4008af75, &(0x7f0000000040)={0x1, 0x3}) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f00000000c0)) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x4) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, 0x0) 00:04:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x484200, 0x0) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, 0x0) 00:04:23 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, 0x0) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nvme', 0x420080, 0x8) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000002c0)='$\xc4#)O,\xa2\nf-C\xd9L\x95\xea\a8~\xf4\x11>\xefj\xa7\x9a\xba\xa88\xa5\x8ab\xdf.e\'\x86\xdc\x19\xef\x82\xa3QMn\xf6[W\xf4\xbb\xe8\xa4N\xf7\xdd\x18j\xf5\xde\xee\xb9\"\x87^%\xdb\xf4?us\xc3}A\xa0\xe1\xa2\xc8\xf7Ej1\x86q\xa9\xbc9\xb7\x83\x85\xd8\x8a\x02\x00-\x98-\xb3,\xe3\\\xc7T\xd9\aC\xb5\xa6J\x84\xa7\x13\xaf\xe9\xe4\xe7h\x82K(J@\x98\xbf\x8c\xfb\x1c', 0x7d) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x800) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000180)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x88) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000140)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12010500}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) socket$inet(0x2, 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000080)={0x0, 0x1ff, 0x5, 0x1, 0x8}) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, 0x0) 00:04:23 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, 0x0) 00:04:23 executing program 4: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, 0x0) 00:04:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5425, 0x0) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5425, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 4: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nvme', 0x420080, 0x8) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000002c0)='$\xc4#)O,\xa2\nf-C\xd9L\x95\xea\a8~\xf4\x11>\xefj\xa7\x9a\xba\xa88\xa5\x8ab\xdf.e\'\x86\xdc\x19\xef\x82\xa3QMn\xf6[W\xf4\xbb\xe8\xa4N\xf7\xdd\x18j\xf5\xde\xee\xb9\"\x87^%\xdb\xf4?us\xc3}A\xa0\xe1\xa2\xc8\xf7Ej1\x86q\xa9\xbc9\xb7\x83\x85\xd8\x8a\x02\x00-\x98-\xb3,\xe3\\\xc7T\xd9\aC\xb5\xa6J\x84\xa7\x13\xaf\xe9\xe4\xe7h\x82K(J@\x98\xbf\x8c\xfb\x1c', 0x7d) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x800) (async, rerun: 64) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000180)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x88) (async, rerun: 64) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000140)) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12010500}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003f22408e1997daf75c492f1e451b112bb829b3452d53edca064f01028adfb04eb3d8fb4f1cc7707e5f8094505db4cc07ede7940104b9a349c40462d9eae24968101a6bbcaf48c0b5b6ee1ff1f1d1e59ae0472a80b7b3310c4c74e7244f1c3fce63f13aa3e5eed7db00565efe6e35711a77ac3d68f3147ea482f3a8dc6776fb2b5615b36eea78e27c95bf51bdb34ef4ab508f55ad8051f1bce2b1ba7841e4cc72ab64f3921df56d93e6e4a5f2000049823deb5d9aef09f53d80b1e940d8d23e6eed2a3189bb92f9d55bbb7a6fe0aa65363b057798d36bec815bd533576b7a8e3d010c7d69af79efd56dfe9212935f2903918159c958738adf9cc4eeb6b4afd04c1566e7f432b3e6af7b2d0fcd167054d05d2dec0636fb79402b54b01dcbb9a0b9df2d964dbe0e735d6c24d16b7fd073b326cc7aea796785fa71f3ff3bbcfa69eb6a0850179e22cf95d97693d4668e635333f789e77e727a", @ANYRES16=0x0, @ANYBLOB="010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) (async) socket$inet(0x2, 0x80000, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000080)={0x0, 0x1ff, 0x5, 0x1, 0x8}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, 0x0) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5427, 0x0) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5427, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 4: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, 0x0) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, 0x0) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nvme', 0x420080, 0x8) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000002c0)='$\xc4#)O,\xa2\nf-C\xd9L\x95\xea\a8~\xf4\x11>\xefj\xa7\x9a\xba\xa88\xa5\x8ab\xdf.e\'\x86\xdc\x19\xef\x82\xa3QMn\xf6[W\xf4\xbb\xe8\xa4N\xf7\xdd\x18j\xf5\xde\xee\xb9\"\x87^%\xdb\xf4?us\xc3}A\xa0\xe1\xa2\xc8\xf7Ej1\x86q\xa9\xbc9\xb7\x83\x85\xd8\x8a\x02\x00-\x98-\xb3,\xe3\\\xc7T\xd9\aC\xb5\xa6J\x84\xa7\x13\xaf\xe9\xe4\xe7h\x82K(J@\x98\xbf\x8c\xfb\x1c', 0x7d) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x800) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000180)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}}, 0x88) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000140)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12010500}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) socket$inet(0x2, 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000080)={0x0, 0x1ff, 0x5, 0x1, 0x8}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000080)={0x0, 0x1ff, 0x5, 0x1, 0x8}) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, 0x0) 00:04:24 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x496a, 0xffffffffffffffff, 0x1}) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) recvfrom$rxrpc(r2, 0x0, 0x0, 0x40012041, 0x0, 0x74) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0xffff], 0x4d) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, 0x0) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x496a, 0xffffffffffffffff, 0x1}) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) recvfrom$rxrpc(r2, 0x0, 0x0, 0x40012041, 0x0, 0x74) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0xffff], 0x4d) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, 0x0) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x496a, 0xffffffffffffffff, 0x1}) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) recvfrom$rxrpc(r2, 0x0, 0x0, 0x40012041, 0x0, 0x74) (async, rerun: 32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0xffff], 0x4d) 00:04:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, 0x0) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5441, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5441, 0x0) 00:04:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x200, 0xffffffff, 0x0, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000080)=0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd', 0x400000, 0x180) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000140)={0x1, 0xba3}) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2000, 0x10000}) 00:04:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, 0x0) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5450, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000080), &(0x7f00000000c0)}) (async) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5450, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5425, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5425, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, 0x0) 00:04:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5427, 0x0) 00:04:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x200, 0xffffffff, 0x0, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000080)=0x1) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd', 0x400000, 0x180) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000140)={0x1, 0xba3}) (async) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2000, 0x10000}) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5427, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x545d, 0x0) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x545d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, 0x0) 00:04:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000680)={0x1, 0x0, 0x200, 0xffffffff, 0x0, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000080)=0x1) (async) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000080)=0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd', 0x400000, 0x180) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000140)={0x1, 0xba3}) (async) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000140)={0x1, 0xba3}) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2000, 0x10000}) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, 0x0) 00:04:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, 0x0) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5441, 0x0) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x301901, 0x0) 00:04:24 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10000, 0xffffffffffffffff, 0x1}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x9) 00:04:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5441, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5450, 0x0) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x301901, 0x0) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:25 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x301901, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5450, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10000, 0xffffffffffffffff, 0x1}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x9) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5451, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10000, 0xffffffffffffffff, 0x1}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x9) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x10000, 0xffffffffffffffff, 0x1}) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x9) (async) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x545d, 0x0) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5607, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, 0x0) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x545d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x200, 0x8}, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5608, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, 0x0) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5460, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, 0x0) 00:04:25 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x200, 0x8}, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x200, 0x8}, 0xc) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) recvfrom$rxrpc(r0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5607, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5600, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, 0x0) 00:04:25 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x200, 0x8}, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5608, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x682d01, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xb, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0x1}}, 0x10) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, 0x0) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:25 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x682d01, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xb, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0x1}}, 0x10) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x682d01, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xb, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2, 0x1}}, 0x10) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5603, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x4) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, 0x0) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560a, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5605, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x4) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x1ac, 0x13, &(0x7f0000000040)="9a99fbcfbbecc65bd5ab37d7d8b3df53edb95626da00d67e6cb9cfdfd1685399e80a47c7ee4245862815661cde1a9f508f5552a449c34b4413c228ba068fad1cf62dfb1a03c0110d70b060b79ec008240b1bfeabb513643cd4ac2d00d327c397bcd1eb872bd7796a965fce04f6f89a9bdd3506068e828273795dfd95e1bbecefc418831b99db8d2a7ac3f76cf1273585bd984675ea37ffd8f9c9a0db1f433e65236ce28fa7749a06d79b0387be6ae7bd2108c747ffe2c08ccbd82cd39e848e0accf8261dee818affeb640ab5ec49689347d2a336ab3c70147af8a1e6a49d73e4d5c84ecff2803f9c5d394469a4688544c32c75e1cffa34ab5f6448c2bc3580ba2a9a3fc7ef858760439cbc36a7ff083335cd5a8fa51e494ec73e3ba6cdc352329598af53ca9a0254e1242ca0d3eb4c502f52127c441b986e6c3bae8e440abfcb03d21c3de40efefb3498eff5db37934b71a63a39293e4393bc46d0272a5f7df88e5c4d6d59a025d826c69aadd017d21a59235d914584cc233ed7d01c832d539c61aede600d61e38c8239fe0390216991a641d4c1e5b37088af2aa9499b4a05eeab95dadc39a2a721da5d4ea62e730bffb374673f2684e0f1f1a5489e2ab638f956a98455b7c7dff2ee2763afbd8289eba8e2b294336308ab29dd786655569f4289f4a1e1c72fc86b54d9851ccc7e3f9ee885c86ae981d4007ebd0b301277ced47f01c04746e72286998e4ad5f497afba13351dc8e000dbbe6e5a5434dea4ff8f49c60c8c773ec518c9e41508464af0f07e5f87327b1d03c2320d863016f899a79ed043de749243f52002eebd263eca2901766379c62010a1f09b49d8a6407a2ee46d76f525f099193ef31ea8db0ab36ab1e483286d2f1e9191f5a66c1523b1bb25a1ea4bd38b0af439a5f3ae36237ee3f2b353282358a5f64fabf305923d3d60bea15cd881f7c1e03910e2470aa46e1109a9418fef9edf7bce085e21cdf20bc8d19efc9217a0ef7750c0aa3f97c452152e5cb013d8393a594fecbc446ba9714e042bfe4c6fc18d826e2049698d8bdb5ddbd0698b19c608c134f5b4a5600ae4630aca146fde8387ac9c8144c99af934f0dc4649c0290673ed5ec561e85983a17cb33a520b496a00c623790f417e46384661ecfdb8c8e7523f116bcabaa5b92ec5b9cc2f79b2bbb960fc77762b999c3d5dd413b113d8a93da25968c4aaf2a6f8f5c4413e53fe4d81543eadd2f0d7ae73affb3ffc1b146f3e61577a9aec6b2e3d490360374dc27084ffb6bd9679586273e00d381e2f676cf97730e73438b9f6ee81b60ff137372253da8f3ea0cf3c2688af06f8da8516c48a7d2709370da7879dfd6d57179a2f1576054269b52f39a00d65eb2e2f4117e4c42d4e20dc2e6cea61b3c30dbdbd74bbc5bd924eef4c66d43b1890d8ece400e0493cad186ae5b3937a87"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5607, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, 0x0) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5606, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000000)=0x4) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5608, 0x0) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x1ac, 0x13, &(0x7f0000000040)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5607, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560c, 0x0) 00:04:25 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ef, @my=0x0}, 0x10, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r2, r3], 0x2, 0x1000}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x250, 0x2, 0x7ff, 0x80001, 0xa, "5d9804b5f3d5c392346b17c580fd8625e4d332", 0x1, 0x7fff}) 00:04:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x1ac, 0x13, &(0x7f0000000040)="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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, 0x0) 00:04:25 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ef, @my=0x0}, 0x10, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r2, r3], 0x2, 0x1000}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x250, 0x2, 0x7ff, 0x80001, 0xa, "5d9804b5f3d5c392346b17c580fd8625e4d332", 0x1, 0x7fff}) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560d, 0x0) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5608, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:25 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1040001) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560a, 0x0) 00:04:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560e, 0x0) 00:04:25 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ef, @my=0x0}, 0x10, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r2, r3], 0x2, 0x1000}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x250, 0x2, 0x7ff, 0x80001, 0xa, "5d9804b5f3d5c392346b17c580fd8625e4d332", 0x1, 0x7fff}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ef, @my=0x0}, 0x10, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r2, r3], 0x2, 0x1000}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0x250, 0x2, 0x7ff, 0x80001, 0xa, "5d9804b5f3d5c392346b17c580fd8625e4d332", 0x1, 0x7fff}) (async) 00:04:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, 0x0) 00:04:26 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1040001) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 00:04:26 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0xf3, 0x3, 0x7fffffff, 0xc0a, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 00:04:26 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0xf3, 0x3, 0x7fffffff, 0xc0a, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0xf3, 0x3, 0x7fffffff, 0xc0a, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) 00:04:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x8933, 0x0) 00:04:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560c, 0x0) 00:04:26 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1040001) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1040001) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:26 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0xf3, 0x3, 0x7fffffff, 0xc0a, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0xf3, 0x3, 0x7fffffff, 0xc0a, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) 00:04:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448c9, 0x0) 00:04:26 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) 00:04:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:26 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) recvfrom$rxrpc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) (async) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x8933, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448dd, 0x0) 00:04:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560d, 0x0) 00:04:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x6, 0xf0, 0x8ee, 0x2, 0x9, "32bce9f44c4511d18986f92369f1d17a66bc63", 0xffffffff, 0x9}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, r0, 0x1}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e21, @loopback}}}, 0x88) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:04:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560c, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448c9, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400454ca, 0x0) 00:04:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560e, 0x0) 00:04:27 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) 00:04:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448dd, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 00:04:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x6, 0xf0, 0x8ee, 0x2, 0x9, "32bce9f44c4511d18986f92369f1d17a66bc63", 0xffffffff, 0x9}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, r0, 0x1}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e21, @loopback}}}, 0x88) (async, rerun: 32) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) (async) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:04:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40049409, 0x0) 00:04:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400454ca, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:27 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/video4linux', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000000)=0x6) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:04:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40049409, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560e, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x8933, 0x0) 00:04:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40086602, 0x0) 00:04:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40086602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448c9, 0x0) 00:04:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40186366, 0x0) 00:04:27 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/video4linux', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000000)=0x6) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:04:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x6, 0xf0, 0x8ee, 0x2, 0x9, "32bce9f44c4511d18986f92369f1d17a66bc63", 0xffffffff, 0x9}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, r0, 0x1}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e21, @loopback}}}, 0x88) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)) (async) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:04:28 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/video4linux', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000000)=0x6) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/video4linux', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000000)=0x6) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448dd, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40186366, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x401c5820, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x8933, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x401c5820, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400454ca, 0x0) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4020940d, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4020940d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40049409, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448c9, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x16, 0x20, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}}, 0x24) 00:04:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0x2c, 0x18, &(0x7f0000000080)="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"}) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045432, 0x0) 00:04:28 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async, rerun: 32) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x16, 0x20, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}}, 0x24) (rerun: 32) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40086602, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045432, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0x2c, 0x18, &(0x7f0000000080)="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"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800}) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0x2c, 0x18, &(0x7f0000000080)="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"}) (async) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40186366, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400448dd, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x16, 0x20, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}}, 0x24) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x401c5820, 0x0) 00:04:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0x2c, 0x18, &(0x7f0000000080)="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"}) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045440, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045440, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x400454ca, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086301, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4020940d, 0x0) 00:04:28 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/kovaplus', 0x604000, 0x2) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086301, 0x0) 00:04:28 executing program 1: write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40049409, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045432, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/kovaplus', 0x604000, 0x2) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/kovaplus', 0x604000, 0x2) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) (async) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086601, 0x0) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045440, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40086602, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 1: write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x801c581f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/kovaplus', 0x604000, 0x2) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/kovaplus', 0x604000, 0x2) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) (async) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x801c581f, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086301, 0x0) 00:04:28 executing program 1: write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) (async, rerun: 64) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x40186366, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, 0x0) 00:04:28 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0x3dfd) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086601, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, 0x0) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x401c5820, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x801c581f, 0x0) 00:04:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r3, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x7, 0x0, {"17f0f1d2d95ae005a04a25458a32d9c4"}, 0xfffffffffffffffc, 0x4, 0x6}, @ib={0x1b, 0xf2, 0x2, {"cc6ecec603e65d826e82ab90dbe1ac5f"}, 0x40, 0x2, 0xffffffffffffffe1}}}, 0x118) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0189436, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4020940d, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:28 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) (async, rerun: 32) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0x3dfd) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 00:04:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0189436, 0x0) 00:04:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r3, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x7, 0x0, {"17f0f1d2d95ae005a04a25458a32d9c4"}, 0xfffffffffffffffc, 0x4, 0x6}, @ib={0x1b, 0xf2, 0x2, {"cc6ecec603e65d826e82ab90dbe1ac5f"}, 0x40, 0x2, 0xffffffffffffffe1}}}, 0x118) 00:04:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc020660b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc020660b, 0x0) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045432, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, 0x0) 00:04:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0x3dfd) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) socket$inet(0x2, 0x3, 0x0) (async) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0x3dfd) (async) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) (async) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x8a, 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r3, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x7, 0x0, {"17f0f1d2d95ae005a04a25458a32d9c4"}, 0xfffffffffffffffc, 0x4, 0x6}, @ib={0x1b, 0xf2, 0x2, {"cc6ecec603e65d826e82ab90dbe1ac5f"}, 0x40, 0x2, 0xffffffffffffffe1}}}, 0x118) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0189436, 0x0) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80045440, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x8a, 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc020660b, 0x0) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086301, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x8a, 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x80086601, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x801c581f, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 00:04:29 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) (async) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) 00:04:29 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000080)=0x9) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa3e9a253f79bffa00000000000000"]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x7, 0x0, [{0x112000, 0xa, &(0x7f0000000140)=""/10}, {0x100000, 0x47, &(0x7f0000000180)=""/71}, {0x4, 0xb7, &(0x7f0000000200)=""/183}, {0x6000, 0x3f, &(0x7f00000002c0)=""/63}, {0x5f79abbe208e3458, 0xa3, &(0x7f0000000300)=""/163}, {0x2, 0x7e, &(0x7f00000003c0)=""/126}, {0x3000, 0x85, &(0x7f0000000440)=""/133}]}) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0189436, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0x401, 0x1, 0x1, 0x6, "fe30fff9130137dbab90d574b1a28595a3050c", 0x3, 0x9}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 3: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)=ANY=[@ANYBLOB="000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008152d4e2637fb200000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000916395582e"]) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)={0x1}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000080)={0x0, 0x1}) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc020660b, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000080)=0x9) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa3e9a253f79bffa00000000000000"]) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x7, 0x0, [{0x112000, 0xa, &(0x7f0000000140)=""/10}, {0x100000, 0x47, &(0x7f0000000180)=""/71}, {0x4, 0xb7, &(0x7f0000000200)=""/183}, {0x6000, 0x3f, &(0x7f00000002c0)=""/63}, {0x5f79abbe208e3458, 0xa3, &(0x7f0000000300)=""/163}, {0x2, 0x7e, &(0x7f00000003c0)=""/126}, {0x3000, 0x85, &(0x7f0000000440)=""/133}]}) 00:04:29 executing program 3: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)=ANY=[@ANYBLOB="000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008152d4e2637fb200000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000916395582e"]) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)={0x1}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000080)={0x0, 0x1}) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)=ANY=[@ANYBLOB="000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008152d4e2637fb200000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000916395582e"]) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)={0x1}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000000c0)) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000080)={0x0, 0x1}) (async) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0x401, 0x1, 0x1, 0x6, "fe30fff9130137dbab90d574b1a28595a3050c", 0x3, 0x9}) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async, rerun: 32) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) (rerun: 32) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x20, 0x81, 0x20, 0x9}, 0x48) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) ioctl$KDDISABIO(r1, 0x4b37) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x4, @loopback, 0x4e21, 0x3, 'nq\x00', 0x28, 0xf65, 0x79}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e24, 0x2, 0x5, 0x101, 0x27a7a884}}, 0x44) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000680)={0x4, 0x0, 0x19, 0x0, 0x0, &(0x7f0000000280)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000200)={0x0, 0x9, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x12, 0x10, 0x115, &(0x7f00000004c0)}) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 3: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000140)=ANY=[@ANYBLOB="000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008152d4e2637fb200000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000916395582e"]) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)={0x1}) (async, rerun: 32) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f00000000c0)) (async, rerun: 64) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000080)={0x0, 0x1}) (rerun: 64) [ 269.761153][ T2702] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000080)=0x9) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa3e9a253f79bffa00000000000000"]) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x7, 0x0, [{0x112000, 0xa, &(0x7f0000000140)=""/10}, {0x100000, 0x47, &(0x7f0000000180)=""/71}, {0x4, 0xb7, &(0x7f0000000200)=""/183}, {0x6000, 0x3f, &(0x7f00000002c0)=""/63}, {0x5f79abbe208e3458, 0xa3, &(0x7f0000000300)=""/163}, {0x2, 0x7e, &(0x7f00000003c0)=""/126}, {0x3000, 0x85, &(0x7f0000000440)=""/133}]}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000080)=0x9) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa3e9a253f79bffa00000000000000"]) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x7, 0x0, [{0x112000, 0xa, &(0x7f0000000140)=""/10}, {0x100000, 0x47, &(0x7f0000000180)=""/71}, {0x4, 0xb7, &(0x7f0000000200)=""/183}, {0x6000, 0x3f, &(0x7f00000002c0)=""/63}, {0x5f79abbe208e3458, 0xa3, &(0x7f0000000300)=""/163}, {0x2, 0x7e, &(0x7f00000003c0)=""/126}, {0x3000, 0x85, &(0x7f0000000440)=""/133}]}) (async) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x8, 0x401, 0x1, 0x1, 0x6, "fe30fff9130137dbab90d574b1a28595a3050c", 0x3, 0x9}) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x20, 0x81, 0x20, 0x9}, 0x48) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) (async) ioctl$KDDISABIO(r1, 0x4b37) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x4, @loopback, 0x4e21, 0x3, 'nq\x00', 0x28, 0xf65, 0x79}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e24, 0x2, 0x5, 0x101, 0x27a7a884}}, 0x44) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000680)={0x4, 0x0, 0x19, 0x0, 0x0, &(0x7f0000000280)}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000200)={0x0, 0x9, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x12, 0x10, 0x115, &(0x7f00000004c0)}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/blk_crypto', 0x20000, 0xe737f4c5e36f9b06) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x5}) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0}) [ 269.858010][ T2728] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001 00:04:29 executing program 0: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/blk_crypto', 0x20000, 0xe737f4c5e36f9b06) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x5}) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x20, 0x81, 0x20, 0x9}, 0x48) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x4, @loopback, 0x4e21, 0x3, 'nq\x00', 0x28, 0xf65, 0x79}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e24, 0x2, 0x5, 0x101, 0x27a7a884}}, 0x44) (async, rerun: 32) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000680)={0x4, 0x0, 0x19, 0x0, 0x0, &(0x7f0000000280)}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000200)={0x0, 0x9, 0x0, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async, rerun: 32) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x12, 0x10, 0x115, &(0x7f00000004c0)}) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:04:29 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bind$rxrpc(r2, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private0, 0x9}}, 0x24) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40002121, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1a200, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x68ca00, 0x0) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f00000004c0)) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x1, r3, 0x1}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000240)=[0x2, 0x2], 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r4, 0x8009, '\x00', 0x0, r6, 0xa, 0x2, 0x4}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r7, 0xff, '\x00', 0x0, r6, 0x0, 0x2, 0x5}, 0x48) r8 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r8, 0x0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r9, 0x5100) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r9, 0x40046210, &(0x7f0000000200)) getsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)=""/38, &(0x7f00000000c0)=0x26) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x2e, 0x1, 0x9, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x6, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 0: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/blk_crypto', 0x20000, 0xe737f4c5e36f9b06) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x5}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/blk_crypto', 0x20000, 0xe737f4c5e36f9b06) (async) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x1, 0x5}) (async) 00:04:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bind$rxrpc(r2, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private0, 0x9}}, 0x24) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40002121, 0x0, 0x0) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40002121, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1a200, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x68ca00, 0x0) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f00000004c0)) (async) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f00000004c0)) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x1, r3, 0x1}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000240)=[0x2, 0x2], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r4, 0x8009, '\x00', 0x0, r6, 0xa, 0x2, 0x4}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r4, 0x8009, '\x00', 0x0, r6, 0xa, 0x2, 0x4}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r7, 0xff, '\x00', 0x0, r6, 0x0, 0x2, 0x5}, 0x48) r8 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r8, 0x0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r9, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r9, 0x5100) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r9, 0x40046210, &(0x7f0000000200)) getsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)=""/38, &(0x7f00000000c0)=0x26) (async) getsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)=""/38, &(0x7f00000000c0)=0x26) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x2e, 0x1, 0x9, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x2e, 0x1, 0x9, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) 00:04:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x7, 0x0, 0x0, 0x0, 0x0}) 00:04:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x9, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000140)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r0, 0x2}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast}, &(0x7f00000001c0)=0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x6, 0x1000, 0x1000, r2, 0x1, '\x00', r3, r4, 0x4, 0x2, 0x0, 0xb}, 0x48) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/k3_udma_glue_chan', 0x88180, 0x29) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = syz_open_dev$dmmidi(&(0x7f0000000280), 0x20, 0x0) read$midi(r6, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r5}) 00:04:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x3, 0x5e, 0x800, 0xbb, 0x1, "d51fadb6eae40ee66a78240700"}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000), 0x8) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:30 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) bind$rxrpc(r2, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private0, 0x9}}, 0x24) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40002121, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1a200, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x68ca00, 0x0) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f00000004c0)) (async) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x1, r3, 0x1}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000240)=[0x2, 0x2], 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r4, 0x8009, '\x00', 0x0, r6, 0xa, 0x2, 0x4}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r7, 0xff, '\x00', 0x0, r6, 0x0, 0x2, 0x5}, 0x48) (async) r8 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r8, 0x0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r9, 0x5100) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r9, 0x40046210, &(0x7f0000000200)) getsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)=""/38, &(0x7f00000000c0)=0x26) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x2e, 0x1, 0x9, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x3, 0x5e, 0x800, 0xbb, 0x1, "d51fadb6eae40ee66a78240700"}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000), 0x8) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:30 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}, r1}}, 0x38) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x9, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x9, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000140)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r0, 0x2}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast}, &(0x7f00000001c0)=0xc) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x6, 0x1000, 0x1000, r2, 0x1, '\x00', r3, r4, 0x4, 0x2, 0x0, 0xb}, 0x48) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/k3_udma_glue_chan', 0x88180, 0x29) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = syz_open_dev$dmmidi(&(0x7f0000000280), 0x20, 0x0) read$midi(r6, &(0x7f00000002c0)=""/4096, 0x1000) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r5}) 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1c) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x3, 0x5e, 0x800, 0xbb, 0x1, "d51fadb6eae40ee66a78240700"}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000), 0x8) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:30 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}, r1}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}, r1}}, 0x38) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) 00:04:30 executing program 0: r0 = syz_io_uring_setup(0x46ce, &(0x7f0000000000)={0x0, 0x1437, 0x2000, 0x1, 0xa8}, &(0x7f0000000080), &(0x7f00000006c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/gp8psk_fe', 0x400001, 0x102) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)={0x6, 0x0, [{0x2000, 0x62, &(0x7f0000000280)=""/98}, {0xf000, 0x58, &(0x7f0000000300)=""/88}, {0x6000, 0x91, &(0x7f0000000380)=""/145}, {0x0, 0xb9, &(0x7f0000000440)=""/185}, {0x1000, 0x77, &(0x7f0000000500)=""/119}, {0x5000, 0x21, &(0x7f0000000580)=""/33}]}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) r3 = socket$inet(0x2, 0x3, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000180)={{0x1d, @multicast2, 0x4e23, 0x3, 'wrr\x00', 0x0, 0xffff, 0x2e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x7ce, 0x3, 0x6}}, 0x44) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b33, 0x0) 00:04:30 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}, r1}}, 0x38) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}, r1}}, 0x38) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) (async) 00:04:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0}) [ 270.927286][ T2811] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0}) 00:04:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(r0, 0x4000) 00:04:30 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) socket$rxrpc(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@echo=0x3) recvfrom$rxrpc(r1, 0x0, 0xffffffffffffffb3, 0x10122, 0x0, 0x0) 00:04:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x9, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000140)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r0, 0x2}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast}, &(0x7f00000001c0)=0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x6, 0x1000, 0x1000, r2, 0x1, '\x00', r3, r4, 0x4, 0x2, 0x0, 0xb}, 0x48) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/k3_udma_glue_chan', 0x88180, 0x29) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = syz_open_dev$dmmidi(&(0x7f0000000280), 0x20, 0x0) read$midi(r6, &(0x7f00000002c0)=""/4096, 0x1000) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r5}) 00:04:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x4000) 00:04:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0}) 00:04:31 executing program 0: r0 = syz_io_uring_setup(0x46ce, &(0x7f0000000000)={0x0, 0x1437, 0x2000, 0x1, 0xa8}, &(0x7f0000000080), &(0x7f00000006c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/gp8psk_fe', 0x400001, 0x102) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)={0x6, 0x0, [{0x2000, 0x62, &(0x7f0000000280)=""/98}, {0xf000, 0x58, &(0x7f0000000300)=""/88}, {0x6000, 0x91, &(0x7f0000000380)=""/145}, {0x0, 0xb9, &(0x7f0000000440)=""/185}, {0x1000, 0x77, &(0x7f0000000500)=""/119}, {0x5000, 0x21, &(0x7f0000000580)=""/33}]}) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) r3 = socket$inet(0x2, 0x3, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) (async) accept4$inet(r3, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000180)={{0x1d, @multicast2, 0x4e23, 0x3, 'wrr\x00', 0x0, 0xffff, 0x2e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x7ce, 0x3, 0x6}}, 0x44) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b33, 0x0) 00:04:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0}) 00:04:31 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) socket$rxrpc(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@echo=0x3) recvfrom$rxrpc(r1, 0x0, 0xffffffffffffffb3, 0x10122, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@echo=0x3) (async) recvfrom$rxrpc(r1, 0x0, 0xffffffffffffffb3, 0x10122, 0x0, 0x0) (async) 00:04:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x6, 0x0, 0x0, 0x0, 0x0}) 00:04:31 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@echo=0x3) (async) recvfrom$rxrpc(r1, 0x0, 0xffffffffffffffb3, 0x10122, 0x0, 0x0) 00:04:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(r0, 0x4000) [ 271.787408][ T2838] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 00:04:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0}) 00:04:31 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRESHEX=r2, @ANYBLOB="000027000800000000000000000005001d0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x48810) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:31 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x4642c2) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0xd4) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 00:04:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x43a280, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x444000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000100)=0x2) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:32 executing program 0: r0 = syz_io_uring_setup(0x46ce, &(0x7f0000000000)={0x0, 0x1437, 0x2000, 0x1, 0xa8}, &(0x7f0000000080), &(0x7f00000006c0)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/gp8psk_fe', 0x400001, 0x102) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)={0x6, 0x0, [{0x2000, 0x62, &(0x7f0000000280)=""/98}, {0xf000, 0x58, &(0x7f0000000300)=""/88}, {0x6000, 0x91, &(0x7f0000000380)=""/145}, {0x0, 0xb9, &(0x7f0000000440)=""/185}, {0x1000, 0x77, &(0x7f0000000500)=""/119}, {0x5000, 0x21, &(0x7f0000000580)=""/33}]}) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) r3 = socket$inet(0x2, 0x3, 0x6) (async) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) accept4$inet(r3, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000180)={{0x1d, @multicast2, 0x4e23, 0x3, 'wrr\x00', 0x0, 0xffff, 0x2e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x7ce, 0x3, 0x6}}, 0x44) (async, rerun: 32) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDFONTOP_GET(r4, 0x4b33, 0x0) 00:04:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x7, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (rerun: 64) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRESHEX=r2, @ANYBLOB="000027000800000000000000000005001d0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x48810) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:32 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x4642c2) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0xd4) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x4642c2) (async) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0xd4) (async) socket$inet(0x2, 0x3, 0x6) (async) accept4$inet(r1, 0x0, 0x0, 0x0) (async) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) (async) 00:04:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x43a280, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000040)) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x444000, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000100)=0x2) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) [ 272.636048][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 00:04:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x4642c2) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0xd4) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) (async) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) [ 272.665630][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.686325][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.691301][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 00:04:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x43a280, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x444000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000100)=0x2) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x43a280, 0x0) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000040)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x444000, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000100)=0x2) (async) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) (async) [ 272.697019][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.703113][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.708974][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x11, 0x0, 0x0, 0x0, 0x0}) [ 272.715010][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.725977][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 00:04:32 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 272.737167][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.741746][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.746838][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.752074][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.755378][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.764314][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.772769][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.780933][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.784830][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.787164][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.789020][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.791028][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.793799][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.796055][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.803335][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.805417][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.807573][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.809230][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.813560][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.815186][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.817428][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.819116][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.821367][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 272.822956][ T2864] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 00:04:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:32 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRESHEX=r2, @ANYBLOB="000027000800000000000000000005001d0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x48810) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x9, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x12, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:32 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x18, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:32 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x1, @remote}, 0x18, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 'veth0_vlan\x00'}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:32 executing program 4: ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x4], 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x1, @remote}, 0x18, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 'veth0_vlan\x00'}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x25, 0x0, 0x0, 0x0, 0x0}) 00:04:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0x19, 0x1, 0x200, 0x0, "9ba7694c8b7aa3e9af45ec43228db44be9c65a", 0x800, 0x2}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x81, 0x401, 0xa1b, 0x3, "d2ba609de0aa1a6e4108b836569fce6eef8fc9", 0x1, 0x5}) 00:04:33 executing program 4: ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x4], 0x2) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b3a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 00:04:33 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x1, @remote}, 0x18, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 'veth0_vlan\x00'}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 4: ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x4], 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:33 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r2, 0x4b3a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 00:04:33 executing program 4: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x100000, 0xfa, &(0x7f0000000000)=""/250}, {0x5000, 0xfd, &(0x7f0000000100)=""/253}, {0x2, 0x1, &(0x7f0000000200)=""/1}, {0x5000, 0x97, &(0x7f0000000240)=""/151}, {0x2, 0xe9, &(0x7f0000000300)=""/233}]}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:33 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0x19, 0x1, 0x200, 0x0, "9ba7694c8b7aa3e9af45ec43228db44be9c65a", 0x800, 0x2}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x81, 0x401, 0xa1b, 0x3, "d2ba609de0aa1a6e4108b836569fce6eef8fc9", 0x1, 0x5}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0x19, 0x1, 0x200, 0x0, "9ba7694c8b7aa3e9af45ec43228db44be9c65a", 0x800, 0x2}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x81, 0x401, 0xa1b, 0x3, "d2ba609de0aa1a6e4108b836569fce6eef8fc9", 0x1, 0x5}) (async) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x300, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) 00:04:33 executing program 4: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x100000, 0xfa, &(0x7f0000000000)=""/250}, {0x5000, 0xfd, &(0x7f0000000100)=""/253}, {0x2, 0x1, &(0x7f0000000200)=""/1}, {0x5000, 0x97, &(0x7f0000000240)=""/151}, {0x2, 0xe9, &(0x7f0000000300)=""/233}]}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:33 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) socket$rds(0x15, 0x5, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b3a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x500, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 64) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) 00:04:33 executing program 4: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0x100000, 0xfa, &(0x7f0000000000)=""/250}, {0x5000, 0xfd, &(0x7f0000000100)=""/253}, {0x2, 0x1, &(0x7f0000000200)=""/1}, {0x5000, 0x97, &(0x7f0000000240)=""/151}, {0x2, 0xe9, &(0x7f0000000300)=""/233}]}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:33 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0x19, 0x1, 0x200, 0x0, "9ba7694c8b7aa3e9af45ec43228db44be9c65a", 0x800, 0x2}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x81, 0x401, 0xa1b, 0x3, "d2ba609de0aa1a6e4108b836569fce6eef8fc9", 0x1, 0x5}) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x600, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 4: ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x119) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000080)={"136ea09b265c2c31d046ad07a2cad424bfdac258257094b6563d5c8aea99", 0x0, 0x1, 0x1, 0xffffffff, 0x6, 0xc1ff, 0xfffffffe, 0x7, [0x8, 0x3, 0x9, 0xfffffff9, 0x8001, 0xff, 0x7, 0x5, 0x80000000, 0x800, 0x9, 0x6, 0x8, 0x1ff, 0x3, 0x400, 0x401, 0x3f, 0x1]}) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x11, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xa0b, 0x200, 0x2, 0x4, 0x10000]}, &(0x7f0000000080)=0x78) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:33 executing program 4: ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x119) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000080)={"136ea09b265c2c31d046ad07a2cad424bfdac258257094b6563d5c8aea99", 0x0, 0x1, 0x1, 0xffffffff, 0x6, 0xc1ff, 0xfffffffe, 0x7, [0x8, 0x3, 0x9, 0xfffffff9, 0x8001, 0xff, 0x7, 0x5, 0x80000000, 0x800, 0x9, 0x6, 0x8, 0x1ff, 0x3, 0x400, 0x401, 0x3f, 0x1]}) (async) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000080)={"136ea09b265c2c31d046ad07a2cad424bfdac258257094b6563d5c8aea99", 0x0, 0x1, 0x1, 0xffffffff, 0x6, 0xc1ff, 0xfffffffe, 0x7, [0x8, 0x3, 0x9, 0xfffffff9, 0x8001, 0xff, 0x7, 0x5, 0x80000000, 0x800, 0x9, 0x6, 0x8, 0x1ff, 0x3, 0x400, 0x401, 0x3f, 0x1]}) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x700, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x12, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xa0b, 0x200, 0x2, 0x4, 0x10000]}, &(0x7f0000000080)=0x78) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:33 executing program 4: ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x119) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000080)={"136ea09b265c2c31d046ad07a2cad424bfdac258257094b6563d5c8aea99", 0x0, 0x1, 0x1, 0xffffffff, 0x6, 0xc1ff, 0xfffffffe, 0x7, [0x8, 0x3, 0x9, 0xfffffff9, 0x8001, 0xff, 0x7, 0x5, 0x80000000, 0x800, 0x9, 0x6, 0x8, 0x1ff, 0x3, 0x400, 0x401, 0x3f, 0x1]}) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x900, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x18, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xa0b, 0x200, 0x2, 0x4, 0x10000]}, &(0x7f0000000080)=0x78) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:33 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_pts(r0, 0x802) 00:04:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:33 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xa00, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x25, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_pts(r0, 0x802) (async) syz_open_pts(r0, 0x802) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001100)={0x0, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/167, &(0x7f00000010c0)=""/9, 0xd000}) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xb00, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) 00:04:33 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_pts(r0, 0x802) (async) syz_open_pts(r0, 0x802) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xc00, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001100)={0x0, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/167, &(0x7f00000010c0)=""/9, 0xd000}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) write$midi(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001100)={0x0, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/167, &(0x7f00000010c0)=""/9, 0xd000}) (async) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x300, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:33 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xd00, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x500, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x141840, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xe00, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x600, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) 00:04:33 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) write$midi(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001100)={0x0, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/167, &(0x7f00000010c0)=""/9, 0xd000}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001100)={0x0, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/167, &(0x7f00000010c0)=""/9, 0xd000}) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x141840, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x141840, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) (async) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x700, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) 00:04:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x2) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x1100, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x900, 0x0, 0x0, 0x0, 0x0}) 00:04:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x141840, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:04:33 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@s={0x5, @generic=0x4, 0x10, 0x6d}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:33 executing program 1: ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002500)={&(0x7f0000002440)=[{0x69a, 0x9a261cfbae52fb92, 0x1000, &(0x7f0000000000)="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"}, {0x101, 0x1010, 0x0, &(0x7f0000001000)}, {0x1, 0x10, 0x64, &(0x7f0000001040)="bab2c7f18d0b9b98bf80725b66384d20cac2551f6484feae327f9a51ec1b1bc0c74762d102635e65ccd6f842ecffd2d0cb5e4d81e67abc340dee5e2b66c49fb83ec6e08b2916d409077c078cf523a01862ab2abf642ecfe968795c3564a86bfa5ed00b57"}, {0x80, 0x1000, 0x60, &(0x7f00000010c0)="8f9419669d73bec56c2b9546e52a4eb2309b393f3eb4f76644813f62b927902632586c56cbdcf58a51867cf4b2d76e9c3521d7947450fcec3d9ea10ccda3699603a5ec50118bd67e59eb3c46d9a0dd3935f707177736b525d9b7fc21f401a843"}, {0x219, 0x0, 0xb1, &(0x7f0000001140)="fd51ba75e25a0e661f3d862569e86154d0d2a7a832b85fe0d371a2262b4fad800850f96de25810380920c6b3e16bb3a2c24fed47723166e517ea1d767a0d0247b6c214ed0d4158233040fc4de5f4be3aa3986b4b6d278347b19eb1d6285ef338d6f1b676992dad5c00fd3bd84ebb58401b1bcfa55a9f645e85d6d624945a3a9e98024c641ccbf13c6ffa55d8f79164d40306956742dbb627ad91e01ff4c863cb4b80b48c6af46a865e4d60fd5d3f61d11c"}, {0x6, 0x1800, 0x8f, &(0x7f0000001200)="4a93d88727bb53bccc5cc47964288f4b361165f4f7158be8e409af08f84e3882052d77b7532357edfa1233847ac7387f6998be0dff9b763d79884b4d9607b4772019a471b809ebc32e74d5d8ef4403a2e282c1ebc507bef06882eb7c91831b62ab41b3080dec548bd728fd6eb2ba9dca51ba67adb4abc37664053c5170ad2279761d844ec8fa8c42e29092f537dd17"}, {0x2fa4, 0xb001, 0x1000, &(0x7f00000012c0)="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"}, {0x8, 0x0, 0xff, &(0x7f00000022c0)="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"}, {0x8, 0x0, 0x2c, &(0x7f00000023c0)="06db049091c776495c235d0cbd55699e8cf6fc86441dc2346767b00791d679d9ccdcabec278c53e75073e7b4"}, {0x5, 0x3000, 0x2c, &(0x7f0000002400)="ca90a7960ec90f58bf7ce6f2af6b37c535b24d875d4ffd0a0eba2ebaa0166cb2cd568198f4f3913bd62de618"}], 0xa}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:33 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x1a281, 0x91) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x80000000, @loopback, 0x1f}}, 0x24) 00:04:33 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000000)) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@s={0x5, @generic=0x4, 0x10, 0x6d}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xa00, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xa10, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x1200, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x1a281, 0x91) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x80000000, @loopback, 0x1f}}, 0x24) 00:04:34 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000000)) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@s={0x5, @generic=0x4, 0x10, 0x6d}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:34 executing program 1: ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002500)={&(0x7f0000002440)=[{0x69a, 0x9a261cfbae52fb92, 0x1000, &(0x7f0000000000)="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"}, {0x101, 0x1010, 0x0, &(0x7f0000001000)}, {0x1, 0x10, 0x64, &(0x7f0000001040)="bab2c7f18d0b9b98bf80725b66384d20cac2551f6484feae327f9a51ec1b1bc0c74762d102635e65ccd6f842ecffd2d0cb5e4d81e67abc340dee5e2b66c49fb83ec6e08b2916d409077c078cf523a01862ab2abf642ecfe968795c3564a86bfa5ed00b57"}, {0x80, 0x1000, 0x60, &(0x7f00000010c0)="8f9419669d73bec56c2b9546e52a4eb2309b393f3eb4f76644813f62b927902632586c56cbdcf58a51867cf4b2d76e9c3521d7947450fcec3d9ea10ccda3699603a5ec50118bd67e59eb3c46d9a0dd3935f707177736b525d9b7fc21f401a843"}, {0x219, 0x0, 0xb1, &(0x7f0000001140)="fd51ba75e25a0e661f3d862569e86154d0d2a7a832b85fe0d371a2262b4fad800850f96de25810380920c6b3e16bb3a2c24fed47723166e517ea1d767a0d0247b6c214ed0d4158233040fc4de5f4be3aa3986b4b6d278347b19eb1d6285ef338d6f1b676992dad5c00fd3bd84ebb58401b1bcfa55a9f645e85d6d624945a3a9e98024c641ccbf13c6ffa55d8f79164d40306956742dbb627ad91e01ff4c863cb4b80b48c6af46a865e4d60fd5d3f61d11c"}, {0x6, 0x1800, 0x8f, &(0x7f0000001200)="4a93d88727bb53bccc5cc47964288f4b361165f4f7158be8e409af08f84e3882052d77b7532357edfa1233847ac7387f6998be0dff9b763d79884b4d9607b4772019a471b809ebc32e74d5d8ef4403a2e282c1ebc507bef06882eb7c91831b62ab41b3080dec548bd728fd6eb2ba9dca51ba67adb4abc37664053c5170ad2279761d844ec8fa8c42e29092f537dd17"}, {0x2fa4, 0xb001, 0x1000, &(0x7f00000012c0)="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"}, {0x8, 0x0, 0xff, &(0x7f00000022c0)="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"}, {0x8, 0x0, 0x2c, &(0x7f00000023c0)="06db049091c776495c235d0cbd55699e8cf6fc86441dc2346767b00791d679d9ccdcabec278c53e75073e7b4"}, {0x5, 0x3000, 0x2c, &(0x7f0000002400)="ca90a7960ec90f58bf7ce6f2af6b37c535b24d875d4ffd0a0eba2ebaa0166cb2cd568198f4f3913bd62de618"}], 0xa}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xb00, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x1800, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) 00:04:34 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x1800, 0x0, 0xffffffffffffffff}) syz_open_pts(r0, 0x2) 00:04:34 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x1a281, 0x91) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x80000000, @loopback, 0x1f}}, 0x24) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x1a281, 0x91) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x1, 0x0, 0x0) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x80000000, @loopback, 0x1f}}, 0x24) (async) 00:04:34 executing program 1: ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002500)={&(0x7f0000002440)=[{0x69a, 0x9a261cfbae52fb92, 0x1000, &(0x7f0000000000)="f43d827401cdcd30cec2d4e4bf4992894b118a6fca9b1c775d7b79722ebb5ea41145e6235643229def5082320c6287f1b0f9475605f6678fac44b294861649fb6197fec83b8e921ba68ff7ce39960fcb8c0125d4fe5d6fa23a5f6187c114125f479a1d6ff509bf8abb1e412d82ef2a40eef7359ebff0160c5077ab846c46433720755d6545c6b3e0ee6b1e9a303ea15b5be30e511835c8e9ff31f6cd33c4906d3f256cd81e299f22b364ee4eead775f37be3c5a3d62722e2fe220b60850fd156d800d4e764b749f68448595c05f8bbf9ca2c114d3d6132cc617c2f553eb6c826513ae045c654ad6f6543aacc1262aaccc71ee507b268422209786ebfd36bb8951e9071854e387467f8a144c8c9d88c07b2325cecc816cd5f1ec7b3e5467c278cca4968332885ccd0668d9a1fa7e97ee0dc69e6f22a05870f0929e4be7458fec5ddf9fe9654c5da5536ed597cf49ddb35377cf6792e40d5ccb6cacc2c0ffe28e2852ca3bbcff219a73f2f485953a69fb28db79c3e14d90c8c3db36c834cc47cb69d75cdab109ca5c1d78a80dac2134622a9df17f915176ed44b0136c59b8826e9051fa2c7107c61429bfacc844ff0cc4ff76b665017300ec960af768967e0c9dd7e8fd74714a2fe5fe79f1ab8d696caf3ec8eae1a62c4d25c53ae76d3395235134684c61fd2c8e2f13f8fa5357b963d3be0634c2cd7fdde340bc02f7a4b11a45211cdc09ce25fc75477876ac576cdddfbe26bc1c474858b81231d03d2bf488285911a7c1f6f286ac0094860ba244a13753f4959a076033dc3cb39d40b078f85a6a1aab0175f5bc76aacf16ede2f371929b3e43755eefbf929bcc3e904bd9c9fcf73b9f1f847fb71a48e8aae8b76a18874f30f9c6e57eb6a7723b8a17715b24ab0f873daf2823776fcddc0e679e6d4b62cafe4cbd2a1782b5205891f07f10c0ea8b9a7a75288a832156343d06f5caa54b2ea2bf3a125801e9ba2fc828e99624f14ea15db5b5ad6bbc9e8a2ddf8799220b7d4b32d97382aaf4ed7922486fe1acdea694af4f3e116a4c0c87249a711dbae91f754d5df549bb1e222365cd8f90b047c604d3b6b56761f9198fa0e1951c0041f35d67097c40441c67782e7efd54823b5fbb752257cbd7b0fc97c7a09cb7a414db2a268ba81a2f5cb3c399d9e70ec7165b01f8f20f42472a3077505e76eb15b4cc586b16380a17dd0e31bb04249e7cd37ba2469858d6263f1ca018bb3dc4aa35201d0a6b90e155a906c4170f5079d2e52be5b43c4f323bbd004bdd8496093922719de6605f70a468026c27e5ad1e4999326ae7b20987bcd623f5f0513a5cd424625b021d6935e74e9df306fdf6e858ddadf8ee6c2943f285ecbea56d5343815ddcb8654ef346663f87d552629bdf548be2ca15e3d33ddeb86d9586de699453c76c98044090a4febf0c2fe38e43038c4b3b0991ce65bb6de4cddeebaacc8c65bfce8c69d529c644080400e8476fa1b9d82af0d1e853ac3642966913abe859f3c1044a9d1b5ea4e1acfbe4050b35b018e88d279c23a826393345ae16e1835ae2752c8fc4c661ed3587d6336ef51f812046c1a852393c248f6f5574de1270f27e2b0a37be9dd0a19e4860fcdd34bfb5fcf356c7eef15e278d564d8ccfb943f1b136d9c18fcbac730e7860ad8c9dfd8e63a33d1caf6c661be75f27195a0ae92eb0d4c775d03691b91a58a252863c3b0459db6ff17a969d1050202748ebbe580f6f980ea7bfd3daefeb64c166d616b887ee80d50a679d726ab6341b864ce0cfd7322f8a2f874ffb65f30f110f85f5ff3a8eef61e71d3ccb13d644e33926d948f84eaafdea43b41677a5180495f7c530f18da4611c322f829572e28221d07fd081bd27236dca456b0e9113bbc8a1739d85289a55a389db3cc8f0fe24107e7628e099386dca85817d63346b56ab7ba6824392b889f0468a2dd3e64f07871504112fd3239438b1ce898030e6d773f3cb67033ddde67f5a1669b8628ad0389d79fc63dac82d7d53970b8d744129e766b6b80b180c48c2b38f0de39d4eefc10bf3790333300ba822d7667de8f580e22d7e9955f23c771e1e391cc7f836f8bb1db3f0d54979f86a6d0b77e2c956e44e484c383af48b8dc2e3ff0606acfba09eeb6c2ff1aa502ecb7ab70e26c2b890337bfa0f1970748a61e190c7b84c16f50150c042c35ee13a63f47662a2627447ea372db191c5fca3ec567cf808fd81d6b9f35b18c24f5a6cd66b3565e8c4fac7d4847c4f350d9ff14941ad7349c70eb932970b17f14c953269e42a802b77fd2e179ec179a53bd441ff88eb3cdb48023a42563822f8035134f3d5704071dbfa5fffce84a5daf80e146621056abfd2c74feb2fdc256ac43228839ab8cb5b556e7ed533c32a054c57efb990fbbd44b0c9ef40d8fa019a70349c1d99257c436b73724eb61b84a94a04d85de16f0be5ed3e6a5f04ae711780fc6435bbfeeaab005923d5ffcd79edd89041d75bcb33054916e3b3f78c4df971ce5d0d8e8062147f1da93d3ce8ea93a4e76cce27d0c2f575f9d1ea4e5518bffe37fa6aa88359e200ee798b3d9bc4acaebee2a4fa8186b2c289bd33a88f3d1139d49453b0316ce36dbef8acd0abd2f7431464c463ed901c2ce08114c55453815487cf88894d137648d80e3f28964596d0ae7c4f96bf4e66705b2654f0e7b9c85029ce85a3af62e1e35ca832078729b09c747d77135805b3546e2c306f9f0662f22b6beebb8c040bd38e9fe16ecd515df529e5a26ec771bc49897efd5b5cb3c33daa12753b0e6ef1b007656ae76b4da4430a24d297b6f9528272fa9742d74b57dcee4d9a2c6aff3cccb4b25e2a6ba1aee5776bce5c15a74d35d081c14fec2144a5f60d957e6748b74662fe5a6abf875605ba91108c9c740f536edea530b5ec2dc3a09f9fa58e5ebbeb06ebff68e7bb1aec75561893b54b42190999974f3e710e1697294fb072745019b6c8057fd0ca21acb7a77842c63809df1e5dd418f0ad8d5771dfdf8b720462d4cd13fd0ec46dc405eee9a12951055f9d4de96eff7b69a4780b1260b5f951a0dab8456d72a2898fb4f41614f2abb85063ca069b8d2059790b094ae8ac7940dabe2c32a0acbed403f2f364ad9c3ed5cb1a8cc126fc76beade32793d9dceee2e9a977a11dbed501efa77fa9ab6077d9b703ea49bb931a5350f587fdfa42d828d55ce272c91bf8a23355f1546eaf872ac2041cafe23a4fc675d10e0b068717610cabb4b5c58479e17d9c95bfae912babf97135b3c7547c4a078a91c82a3608dfef82d5ad94c0b56f3632abfe710ea1743bfa5555e0add9ff4c0750ab12077e605b9b4cdf8964b91c59ae687e750ae387bd670d7acf81bdda4beff9c52608b4eab727884b9acd03944274c43ff7b05e678a6ca6b7625227845c0bf04992247343063e06c9270ac42808635ab01cf23cbc243a97fbfdecafc3c3545947c6465f8f261f5c76d74760279c8d7fcdbec64c956dbb3f30f8050030389bb28bfdfaafa51ea328bbf9cd320d9f4c6f672a892b556344dfdc920578ad521966055d4ac359cd03ac2c5142cccaefc5730f1142589b8d337912d258125ba46ec1d00ffab382fe5093fe0eaf8badcbafc6b069cdf8c3ba962aa21122484d2f27af1aeabcf01d5c00d6909b2292109d01af746fe12f6b62628d6cf07c0c1d3c2480461aec0dee40f0acb3805c4f78e4c3731f0727aecba63c2d0e2f7595fdc24fbbfdecdc539ade205557d57f1913dff6810a51c27cc43e25f63d8c40a93157e30463e5861f0a528148a6104a0d3270c15208dd577fb56c1fd7ae18557bd24e9f8c9a608f669cd5eb029d6bdeb6d1608afbc19a8c8e695e346d308fd7e4ed7f0e6d4f5920dabf6a2adf2c4fcc62c446178563a55f0fff326c9c87bb7526e685aa6ed01d23eacc301b9a3d5f349ef862562f8af7f8f323cd870a47a9819c35c5f9006bbb9a833349a96629cf913c264ea7c37f7c4ed07ead7b11caea856e3990f333909d58b0e27d32374860e62427e4aed15a7b6296a721465a9233b585f316250fa9c74809f4b844d54688e92e4f732d78fee5a206dff25d909eedd022c559f2ce79961e98ab775ae1e2929957038a67ff5a8f08885d1c03d42cac41c9209e61cebb405aa26c4713c39b0e31afef7403e18562870a4b04b7e73943ea495949c17c74105bb7cb50a8ef6102c161d570a70e01a5540713f3d355c22f29a8f2c16a4021da4f674580e68007fd836c2752334e650fa798651c00d2417e6740cec0365117982892163d4935b3928f9d2f49d05a7bc259d01f06c817882a0f08525cbb9df5d15778193329fde18f09a938c335b6cf32082ff0fe78ea6e2ecfd164b20123c16a1be3ff21c6370b882c830d85f06a5e29b8ae14374d0ed95dd98386415aa42e953ecc53bacd62abe4f07065b8992410ec1fd387282167b7ae9b34c2be350d88f999350520865baf4e797dee6520a338479ee24341a20d0304eae6863b3972ea078f25e45df2a47f5f4e5266224dd62e9c6fb614cec470b4070a5eec03f44a0c7170754b4bb16b678593632e1ccce0739bbf276df78db71ed698cf24152c94eaee08fee544592b3b31383d78f9427491f44713a56b87140c48a6c4c41a66a733fb1eb1fae664b6f28b8ba9b190224f3e6f07ee0e2604e74e091e51dbbed67acafb28f6a5fa09658366e0d078dd588d38725fb0d65da06a8db973f7184720851fe01cb79a1bdda52a3a9194177c3774d9106a1b265bbe5df270af0318a7e4c087821484de3fd18a5e1decd1e5dc60d5ac27986299eac5051c2d7136466ec8f4dfbb7f532d309e4b3748dab1837a71a479c7ca17d28042514624bca30ee1a8b14080f8815f7578fa6de93902cb350c93ee5cae36472aa884d824d531788b31e79d7696646e69941b099d3559d2198cf33fae884067a8dc404937a858cd10eb468692246a9eb8e96059b83dac599c148723f366560ae92875d77d0a58dbeab7fdb4eca6b35ab93f12124df89638d7fbfc09baf569b6a2ddadfadcc4d4f3830c965f9a26c33eb70565fa0f7ae3d272ccd8201f024cea894fcb84ad0fd391d32d8a5787e9a541ccdda8681125ab595b858594b78871d3aafe1f23917b50645ddd5f0cf1b270486f8161e0721dce5ce8f25092e162238ba64769b45d163f3ea17a56a6f3afa195c3e8a69415d6ba098c258826e7db6041a61b0c6a072a3f7384ae431e95bbb94998b75dd962b7ba28ff4c06eaf93f0cb8ac844248477cbf5415d93b292d28f1e1149d5479d8a54aea01bf52d3bd4a2d9c9fc15bb994d1f808072715ecd8d38d60ee048b8ec2a596cdedc4138e157477ac30c5ec75349eb3e7930f0e9eb3294aa3fd8da7c525df608b19b0e68a24a2bb722f39e3292c9ce4aa3d21f87d7a3040a5680e35239e4ff2f1b06380321eb184cabc7e244c82deaf090f17b7b6291de79133b47b0cccea88dcd447bf7eae9b8f10c8d0e9f11ed5f9b5bff2b980b36973684851e0aaaf3b3ce086ad1bbe04dfb0a65d56cf7afed3e98d2363cd5bbbd8181d850bcac0953d8f1c872ea2d906b4860f462e6660180ceef12a113578339f758c1f4b45370b9b31bbbaf9775388a0d204f7e6b9ce8875c0521dcfc388ff7e0d4c9a36e2502519628bc4fb7552b18fb2ecb619a981eb1eeba9b2f69f0e5300775e3adb08949456557289bb90eda6e0b60db34f4aa03b65b47866af04a486a6d3fd252b23d5ae4759e8e426ed6b3ce970755c8255ccaa5757ebcd015e5d20891115163a33805e867efe2720519"}, {0x101, 0x1010, 0x0, &(0x7f0000001000)}, {0x1, 0x10, 0x64, &(0x7f0000001040)="bab2c7f18d0b9b98bf80725b66384d20cac2551f6484feae327f9a51ec1b1bc0c74762d102635e65ccd6f842ecffd2d0cb5e4d81e67abc340dee5e2b66c49fb83ec6e08b2916d409077c078cf523a01862ab2abf642ecfe968795c3564a86bfa5ed00b57"}, {0x80, 0x1000, 0x60, &(0x7f00000010c0)="8f9419669d73bec56c2b9546e52a4eb2309b393f3eb4f76644813f62b927902632586c56cbdcf58a51867cf4b2d76e9c3521d7947450fcec3d9ea10ccda3699603a5ec50118bd67e59eb3c46d9a0dd3935f707177736b525d9b7fc21f401a843"}, {0x219, 0x0, 0xb1, &(0x7f0000001140)="fd51ba75e25a0e661f3d862569e86154d0d2a7a832b85fe0d371a2262b4fad800850f96de25810380920c6b3e16bb3a2c24fed47723166e517ea1d767a0d0247b6c214ed0d4158233040fc4de5f4be3aa3986b4b6d278347b19eb1d6285ef338d6f1b676992dad5c00fd3bd84ebb58401b1bcfa55a9f645e85d6d624945a3a9e98024c641ccbf13c6ffa55d8f79164d40306956742dbb627ad91e01ff4c863cb4b80b48c6af46a865e4d60fd5d3f61d11c"}, {0x6, 0x1800, 0x8f, &(0x7f0000001200)="4a93d88727bb53bccc5cc47964288f4b361165f4f7158be8e409af08f84e3882052d77b7532357edfa1233847ac7387f6998be0dff9b763d79884b4d9607b4772019a471b809ebc32e74d5d8ef4403a2e282c1ebc507bef06882eb7c91831b62ab41b3080dec548bd728fd6eb2ba9dca51ba67adb4abc37664053c5170ad2279761d844ec8fa8c42e29092f537dd17"}, {0x2fa4, 0xb001, 0x1000, &(0x7f00000012c0)="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"}, {0x8, 0x0, 0xff, &(0x7f00000022c0)="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"}, {0x8, 0x0, 0x2c, &(0x7f00000023c0)="06db049091c776495c235d0cbd55699e8cf6fc86441dc2346767b00791d679d9ccdcabec278c53e75073e7b4"}, {0x5, 0x3000, 0x2c, &(0x7f0000002400)="ca90a7960ec90f58bf7ce6f2af6b37c535b24d875d4ffd0a0eba2ebaa0166cb2cd568198f4f3913bd62de618"}], 0xa}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x2500, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xc00, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x5c00, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xd00, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x1e, 0x12, &(0x7f0000000080)}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) 00:04:34 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/hid_prodikeys', 0x100, 0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x3657, @mcast2, 0x101}}, 0x24) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x50}}, 0x20040800) 00:04:34 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x1800, 0x0, 0xffffffffffffffff}) (rerun: 32) syz_open_pts(r0, 0x2) 00:04:34 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/hid_prodikeys', 0x100, 0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x3657, @mcast2, 0x101}}, 0x24) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x50}}, 0x20040800) 00:04:34 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_open_pts(r1, 0x0) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async, rerun: 64) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 64) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x1e, 0x12, &(0x7f0000000080)}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) 00:04:34 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/hid_prodikeys', 0x100, 0x0) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x3657, @mcast2, 0x101}}, 0x24) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x50}}, 0x20040800) (rerun: 32) 00:04:34 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x1800, 0x0, 0xffffffffffffffff}) syz_open_pts(r0, 0x2) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xe00, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_open_pts(r1, 0x0) 00:04:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:34 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x1e, 0x12, &(0x7f0000000080)}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x1e, 0x12, &(0x7f0000000080)}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) (async) 00:04:34 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe6e, 0x10042, 0x0, 0xfffffffffffffe90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x700, 0x81, 0x6, {{0x29, 0x4, 0x0, 0x34, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x7, 0xe, "157fc221d8ad3f9a49d9c60e"}, @timestamp={0x44, 0x14, 0xd2, 0x0, 0xa, [0x15dc6a5c, 0x1, 0x3, 0x401]}, @lsrr={0x83, 0x1f, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @private=0xa010100, @private=0xa010102]}, @noop, @noop, @timestamp_addr={0x44, 0x34, 0x92, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x44}, {@broadcast}, {@local, 0x7ff}, {@multicast1, 0x7969}, {@broadcast, 0x428}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x6, 0xc, "7ab0d761b684d562c858"}]}, @end, @ra={0x94, 0x4, 0xfff}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', r0, 0x8, 0x7800, 0x80, 0x8, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x13, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0x85, [@multicast2, @broadcast]}, @ssrr={0x89, 0xf, 0xbf, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x18}]}]}}}}}) clock_getres(0x5, &(0x7f0000000300)) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/76, 0x4c, 0x10040, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x3c}, @local}, 0x8) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x3000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_open_pts(r1, 0x0) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x100a, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:34 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe6e, 0x10042, 0x0, 0xfffffffffffffe90) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x700, 0x81, 0x6, {{0x29, 0x4, 0x0, 0x34, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x7, 0xe, "157fc221d8ad3f9a49d9c60e"}, @timestamp={0x44, 0x14, 0xd2, 0x0, 0xa, [0x15dc6a5c, 0x1, 0x3, 0x401]}, @lsrr={0x83, 0x1f, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @private=0xa010100, @private=0xa010102]}, @noop, @noop, @timestamp_addr={0x44, 0x34, 0x92, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x44}, {@broadcast}, {@local, 0x7ff}, {@multicast1, 0x7969}, {@broadcast, 0x428}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x6, 0xc, "7ab0d761b684d562c858"}]}, @end, @ra={0x94, 0x4, 0xfff}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', r0, 0x8, 0x7800, 0x80, 0x8, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x13, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0x85, [@multicast2, @broadcast]}, @ssrr={0x89, 0xf, 0xbf, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x18}]}]}}}}}) (async) clock_getres(0x5, &(0x7f0000000300)) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/76, 0x4c, 0x10040, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x3c}, @local}, 0x8) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x1100, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x4000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) syz_open_pts(r3, 0x2400c0) 00:04:34 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x711982, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_pts(r0, 0x143000) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:34 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe6e, 0x10042, 0x0, 0xfffffffffffffe90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x700, 0x81, 0x6, {{0x29, 0x4, 0x0, 0x34, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x7, 0xe, "157fc221d8ad3f9a49d9c60e"}, @timestamp={0x44, 0x14, 0xd2, 0x0, 0xa, [0x15dc6a5c, 0x1, 0x3, 0x401]}, @lsrr={0x83, 0x1f, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @private=0xa010100, @private=0xa010102]}, @noop, @noop, @timestamp_addr={0x44, 0x34, 0x92, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x44}, {@broadcast}, {@local, 0x7ff}, {@multicast1, 0x7969}, {@broadcast, 0x428}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x6, 0xc, "7ab0d761b684d562c858"}]}, @end, @ra={0x94, 0x4, 0xfff}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x700, 0x81, 0x6, {{0x29, 0x4, 0x0, 0x34, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x7, 0xe, "157fc221d8ad3f9a49d9c60e"}, @timestamp={0x44, 0x14, 0xd2, 0x0, 0xa, [0x15dc6a5c, 0x1, 0x3, 0x401]}, @lsrr={0x83, 0x1f, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @private=0xa010100, @private=0xa010102]}, @noop, @noop, @timestamp_addr={0x44, 0x34, 0x92, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x44}, {@broadcast}, {@local, 0x7ff}, {@multicast1, 0x7969}, {@broadcast, 0x428}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x6, 0xc, "7ab0d761b684d562c858"}]}, @end, @ra={0x94, 0x4, 0xfff}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', r0, 0x8, 0x7800, 0x80, 0x8, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x13, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0x85, [@multicast2, @broadcast]}, @ssrr={0x89, 0xf, 0xbf, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x18}]}]}}}}}) clock_getres(0x5, &(0x7f0000000300)) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/76, 0x4c, 0x10040, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/76, 0x4c, 0x10040, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x3c}, @local}, 0x8) 00:04:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x1200, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x5000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) syz_open_pts(r3, 0x2400c0) 00:04:34 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x711982, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDISABIO(r1, 0x4b37) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_pts(r0, 0x143000) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0)={{0x8, @private=0xa010100, 0x4e24, 0x0, 'rr\x00', 0x8, 0x200, 0x5d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0x4, 0xc79c, 0x83}}, 0x44) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x113642, 0x0) 00:04:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x6000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (rerun: 64) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) syz_open_pts(r3, 0x2400c0) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x1800, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x7000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x2500, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0)={{0x8, @private=0xa010100, 0x4e24, 0x0, 'rr\x00', 0x8, 0x200, 0x5d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0x4, 0xc79c, 0x83}}, 0x44) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x113642, 0x0) 00:04:34 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x711982, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_pts(r0, 0x143000) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x711982, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_pts(r0, 0x143000) (async) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x10, 0x1, 0x80000001, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x5c00, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000004c0)={{0x8, @private=0xa010100, 0x4e24, 0x0, 'rr\x00', 0x8, 0x200, 0x5d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0x4, 0xc79c, 0x83}}, 0x44) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x113642, 0x0) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x10, 0x1, 0x80000001, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x10, 0x1, 0x80000001, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) 00:04:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2101, 0x0, 0x0) (async) 00:04:34 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x40, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000080)={0x4, 0xb3, "6b12f35218074043e9019713024d9e358ae37c42454bb77e1ba284f0534f4eae5085c9a25348ef6e4353d7c20d58b66b7cbe7b6c3c28368f46b94111d8567dcfbb14c71a76358c7a9499162ee759d656d725d44ee3fa642f608ed3fe8de53bcbac6ff6c086b30153e1af4b312dfba2388f55248a92eaf383c38750084cf61261ed490f1a4c8081ae185321983cff8e78f3c9779eedca19db3dcb0efef7aee6cb4aa258e6b8f2058ad15101c53de99344224402"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) r2 = syz_open_pts(r1, 0x200000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x9000000, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x10, 0x1, 0x80000001, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xe0ffff, 0x0, 0x0, 0x0, 0x0}) 00:04:34 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x40, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000080)={0x4, 0xb3, "6b12f35218074043e9019713024d9e358ae37c42454bb77e1ba284f0534f4eae5085c9a25348ef6e4353d7c20d58b66b7cbe7b6c3c28368f46b94111d8567dcfbb14c71a76358c7a9499162ee759d656d725d44ee3fa642f608ed3fe8de53bcbac6ff6c086b30153e1af4b312dfba2388f55248a92eaf383c38750084cf61261ed490f1a4c8081ae185321983cff8e78f3c9779eedca19db3dcb0efef7aee6cb4aa258e6b8f2058ad15101c53de99344224402"}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) r2 = syz_open_pts(r1, 0x200000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 00:04:34 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xc0800, 0x0, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)=0x101) 00:04:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:34 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x81000, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x0, {0xa, 0x4e21, 0x5, @mcast2, 0x9}, r6}}, 0x38) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xa000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xc0800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xc0800, 0x0, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)=0x101) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)=0x101) 00:04:35 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x40, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000080)={0x4, 0xb3, "6b12f35218074043e9019713024d9e358ae37c42454bb77e1ba284f0534f4eae5085c9a25348ef6e4353d7c20d58b66b7cbe7b6c3c28368f46b94111d8567dcfbb14c71a76358c7a9499162ee759d656d725d44ee3fa642f608ed3fe8de53bcbac6ff6c086b30153e1af4b312dfba2388f55248a92eaf383c38750084cf61261ed490f1a4c8081ae185321983cff8e78f3c9779eedca19db3dcb0efef7aee6cb4aa258e6b8f2058ad15101c53de99344224402"}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) (async) r2 = syz_open_pts(r1, 0x200000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xb000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x81000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x81000, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x0, {0xa, 0x4e21, 0x5, @mcast2, 0x9}, r6}}, 0x38) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xc000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xc0800, 0x0, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) (rerun: 64) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)=0x101) 00:04:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x81000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x81000, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x0, {0xa, 0x4e21, 0x5, @mcast2, 0x9}, r6}}, 0x38) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x3000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xd000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5413, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) 00:04:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:35 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x4000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xe000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = syz_open_pts(r0, 0x100000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5413, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 32) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) 00:04:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:35 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = syz_open_pts(r0, 0x100000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) 00:04:35 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:35 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x5000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5413, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x11000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = syz_open_pts(r0, 0x100000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_pts(r0, 0x100000) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) (async) 00:04:35 executing program 4: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xad6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40021}, 0x24008091) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/slab', 0x600, 0x2e) recvfrom$rxrpc(r1, 0x0, 0x0, 0x20, 0x0, 0x1a) 00:04:35 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:35 executing program 1: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty, @remote}, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x12000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x6000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f0000000640)=0x2) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x1, r2}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x5, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x9, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000480)}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:35 executing program 1: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty, @remote}, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:35 executing program 4: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xad6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40021}, 0x24008091) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/slab', 0x600, 0x2e) recvfrom$rxrpc(r1, 0x0, 0x0, 0x20, 0x0, 0x1a) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x7000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 4: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xad6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40021}, 0x24008091) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/slab', 0x600, 0x2e) recvfrom$rxrpc(r1, 0x0, 0x0, 0x20, 0x0, 0x1a) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xad6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40021}, 0x24008091) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/slab', 0x600, 0x2e) (async) recvfrom$rxrpc(r1, 0x0, 0x0, 0x20, 0x0, 0x1a) (async) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x18000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty, @remote}, 0xc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f0000000640)=0x2) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f0000000640)=0x2) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x1, r2}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x5, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x9, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000480)}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x38, 0x5, &(0x7f0000000000)="c87feaef8929401f948e140f995dff7f58f74efb597d9967f241e99046a5882c11f6c78854f5fe2640afd6e3ccc2d56b90ee3b298954b54a2e5da47db1d33e4e731443374ecada33ccca70eb49c85609efdb3799f9ae439a316bef6e0d4835befeada9eabe8899e5ec4c12d260246fe0558f72db200a3ad915af86a72e5c9e509f2338d51962cf3606bc547ff16e4818558630dbb9032a184883f0736fb912d5bad3fd09602de7640838d3a795fe7369210f7cc4ad71a8d6b019d06aff16022da1783981ca2a610a0455e68c438c9b031eeba0665d8bc7f881d9e39a9613615dfff1de42e77759efbfe50b4b8381b588b3209309966a40cb52622b1d4a3465379bb4733c0f9887b75d74a197277368d013cacc8925140cbd61d9dacb8db4008470ac479daaaa0362094589d9ff89f85fee1f4e7ef4d0b379927cd70d72137c167d6945b8f844697d65a59331f8466c547c5b6e198d26f0af82afc4d51aa9572a087cc17265a51e395bb71ff1c1eff880f02ba84b234eddbd6f7e36065623abc0e8a286843d0e5349f46230075647b0c0e8dc22c64e0c2b47d5f4866e5b2e3a57174c3417a603a582ff0175f5fd410b149af7bd914d8271ea8e27d0e4f7c2247acb8e01bba226e946199ff0bef05ea550d80850494c985f7464f059f94b5567cf9aac06667dbc17e6c5b819775241aec401604a041b6e858ccf38d2ebf0d372f19782e32797f4d1445a52af6ef41799d7efbc2b883cdcf68d00e625dad872f44636feac11bbea9c58ab0daf08bd388af272a4d33c39196188b27700d00d15c9cbc65358a8fcd8f2e71b3bcb035b99b38db912c5712dbc4fc416bc881c98314634d4674bf843cd45843d96be5e331a29af2257781af0fe0c107b44486596491c0977b7b3fc4022741e6d466102c82b8f3cae23cb0fd8f35882a799e0e1db959523d42b1371912940f81146dfd037b23829334ee62dc5e99dd7eeef6f833e320009c143e27b19e7685d36a1f9300866a37a0a3d6a22c5dc00fff6a0471f1b8fae457311dd6aac1ccf6530b9704b68936dbc55ca87bf69a8d5606ab52b883165176898fe6aaa3103d38ec5a2e068ea643c93011346919940cb825d2abdae85f7453b50293df5b29de7fbe2e673696774751331d665099d83e21e318ea7461c1f9689e350e7bbb49209206ebec28452c29d7cec5a5cef123da4444947581537c0d04e422d4ed509b473ac39b753b09000015affa1f0700c4f8ba75e18624c13339e9a5c69f422c4f4601656041d47ef8fa90a28c536a7cdf49c069b4553d41644420da6f3dcc3544270be273acad92847ea127f4345a19882d8c2a8d61bfa7a8edc40a6f4c04bd3e423f98e0ee0317236b3f0356a8f06c9f7a4d8db6da75053b4268c1c91c1a8301926f56127a79d66cb4f962296d72c76d863a459b727cb79a2ea84"}) 00:04:35 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/layerscape_edac_mod', 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000480)) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x7f) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000300)=ANY=[@ANYBLOB="010400007d56f040da876367ef0ee7d3a10000009590ffffffffffffffffe96de712971cbf14293bdb58d1b12cfb5a01309fb6e32926208a20262c9b0e41fa407fdfef4e2187273eed6e2d320728662c26232e8ea24d8c2960720b72acb27ac3382fae8616c16fe5c23be810414c688f1e525e2977e47444883227677b82c42abdf405f0f161838441b39a5ef0c629000000"]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1ff) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r4, 0x9, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x2, r5}) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x9000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) 00:04:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x38, 0x5, &(0x7f0000000000)="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"}) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x25000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4004af77, &(0x7f0000000640)=0x2) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x1, r2}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x5, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x9, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000480)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x5, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x9, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000480)}) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xa000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x5c000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) (async) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xb000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x38, 0x5, &(0x7f0000000000)="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"}) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/layerscape_edac_mod', 0x2000, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/layerscape_edac_mod', 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000480)) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x7f) (async) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x7f) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000300)=ANY=[@ANYBLOB="010400007d56f040da876367ef0ee7d3a10000009590ffffffffffffffffe96de712971cbf14293bdb58d1b12cfb5a01309fb6e32926208a20262c9b0e41fa407fdfef4e2187273eed6e2d320728662c26232e8ea24d8c2960720b72acb27ac3382fae8616c16fe5c23be810414c688f1e525e2977e47444883227677b82c42abdf405f0f161838441b39a5ef0c629000000"]) (async) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000300)=ANY=[@ANYBLOB="010400007d56f040da876367ef0ee7d3a10000009590ffffffffffffffffe96de712971cbf14293bdb58d1b12cfb5a01309fb6e32926208a20262c9b0e41fa407fdfef4e2187273eed6e2d320728662c26232e8ea24d8c2960720b72acb27ac3382fae8616c16fe5c23be810414c688f1e525e2977e47444883227677b82c42abdf405f0f161838441b39a5ef0c629000000"]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1ff) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1ff) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r4, 0x9, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x2, r5}) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xc000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000140)) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000100)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f00000002c0)) 00:04:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r6, 0x1c, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x69}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x70cb5776, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, r4}}, 0x38) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0xffffff7f, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xd000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r6, 0x1c, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x69}}}, 0x90) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x70cb5776, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, r4}}, 0x38) 00:04:35 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/layerscape_edac_mod', 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000480)) (async) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000080)=0x7f) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000300)=ANY=[@ANYBLOB="010400007d56f040da876367ef0ee7d3a10000009590ffffffffffffffffe96de712971cbf14293bdb58d1b12cfb5a01309fb6e32926208a20262c9b0e41fa407fdfef4e2187273eed6e2d320728662c26232e8ea24d8c2960720b72acb27ac3382fae8616c16fe5c23be810414c688f1e525e2977e47444883227677b82c42abdf405f0f161838441b39a5ef0c629000000"]) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1ff) (async) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r4, 0x9, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x2, r5}) 00:04:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000140)) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000100)) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f00000002c0)) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/pstore', 0x2000, 0x9d) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0xc5, 0x1f, &(0x7f0000000100)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xf69e, 0x9, 0xfff, 0x6, 0xb, "df8cafcfa5b60b9fe68231b16af57eb4d05f16"}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000540)={0x800, {{0x2, 0x4e22, @remote}}}, 0x88) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xe000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0}) 00:04:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x0, r6, 0x1c, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x69}}}, 0x90) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x70cb5776, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, r4}}, 0x38) 00:04:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0}) 00:04:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/pstore', 0x2000, 0x9d) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0xc5, 0x1f, &(0x7f0000000100)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xf69e, 0x9, 0xfff, 0x6, 0xb, "df8cafcfa5b60b9fe68231b16af57eb4d05f16"}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000540)={0x800, {{0x2, 0x4e22, @remote}}}, 0x88) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/pstore', 0x2000, 0x9d) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0xc5, 0x1f, &(0x7f0000000100)="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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xf69e, 0x9, 0xfff, 0x6, 0xb, "df8cafcfa5b60b9fe68231b16af57eb4d05f16"}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000540)={0x800, {{0x2, 0x4e22, @remote}}}, 0x88) (async) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0}) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000140)) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000100)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f00000002c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000140)) (async) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000280)) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000100)) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f00000002c0)) (async) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x100a0000, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/pstore', 0x2000, 0x9d) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)={0xc5, 0x1f, &(0x7f0000000100)="a58d315f77041c95e5d811c755f01f9fa02d80e7d0acd05cd65a7462dd974d309b079c46984b84cc0399cb59d858ffbcdedaa2b41a257833fa175c129a9ad988ac929ecb58a7b1e97cb35564f054cef0de01612a6a31f7be33a18188d6cf6c288c2730067e7afe57befc56b03d5a149a4eeceb72e6213e7e5d7ea0e4f5c89c09346ade7b3fdf9ccd39e492843b8a6de95794bd89f2b93c2af239a15c7726d3e738f45338630f234ec98f9ad71f0bc944806e8810ac0e097d0e605ce4a1ebde0e1957e3f41e12d852b69fa930151548fa830e35058d9a97d3785562f3cfaa6a011810b813a37550e97c873ab3a9181ec49ba7771b93ede6efca77719514a98ae824ff0cccb78f5151630d017d867c1858baf54a502b84052d7bc3e48d178a3b20126da18d17406a014ac6fd1ab38ca28eedbadce949d4394aeb52bb32a90a08a00218e6a050d1bba51e276aa5bde0a817f0f11f309db2a5ecba76723420aa504bef53005776004b92be2a32bdb6aa00d5882e7c6adbb79ad9d4b2b8cb447d25b74430b910f7c82310a739a85a84ec8c754ca6b95bf5cecb8d6bfadcc814de3af8028353530605c5d5fa2f4e5cf7e94fa50a4be190e2442478e2c247bc4e3759ecaef1c58c5fd9fbe9b3952c1f5fe3fee010f3efe4be5be800c52f70406bf2b7494a2a4e12b2efb94cc68cdef59145f2f8d03735ebe1f0997c797ddabfdbee211461a958fcb644bfc9d75282926f9307d51d6da1b65d5ded541f13d18202e49c70b2fb457c32e2f43391f96c615a6a50e62ba0d7213c5068e838a93ca899c576b3487f5d0d84dfe133fc46ae4e5ce04ab25a2a29e5cb5ffea84aac58ca1dc2fd3dfdc903e6858ed14586e8f75a05cc7bad2149c863340d4d7b2dc6c77955012faf4e21fad54333b656b8ae556ce569f659b25c8dccab92a1acbc39d774b32c9e76f1ffa405db29d571ee62225f55db71e7a76406a292ce3c59bec6ceaeb9a26f76d74a2d91aa812775041d1e74a75e3e80cb19f586742049c8d15759ecfa32252ee13b84cbab89d9c3a184bbe01659a06941c25fd20d0becb9defce706ea6be9f89f23c1053d9ea223cee32f3576b0826c598cbc16d1cc72a5e7d72e49d70f9c7c70e8075e1c4bdd4cf64ba2b17f04cfbb3a62b2da8acb546f2d83df20583b86ac657dc0f1f2222e6aca57fc537a05d65dc6d2554790741db061b54b29df46351bb733471a2e6b8bbb4d086b750ee440ed8d1ac3d7dfa39e0e97412be07b06f7901d692a0a43aa7d7da1a873e1ff77ee0af87199fcde9d6637c0d326de95555b448e6711309ad0f2365733dfa17cb18391c54c2bfb7cdb7568301995df15ffbe4770d6e0717d4968162d717e99f237c827ba08033e8872a5371c3dc679f894ebb3cc72d3517b42ecd632cc00"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xf69e, 0x9, 0xfff, 0x6, 0xb, "df8cafcfa5b60b9fe68231b16af57eb4d05f16"}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000540)={0x800, {{0x2, 0x4e22, @remote}}}, 0x88) 00:04:36 executing program 4: socket$key(0xf, 0x3, 0x2) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x35a000, 0x0) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x4, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x40000000000000) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x11000000, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x35a000, 0x0) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x12000000, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x40000000000000) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x5, 0x0, 0x0, 0x0}) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x18000000, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 4: socket$key(0xf, 0x3, 0x2) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x35a000, 0x0) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x6, 0x0, 0x0, 0x0}) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x4, 0x7b, "10cc84829284407a5264709ae7836f5cd9a815297fa68a13b2141e820f6a154889804872323d1f03cc9118674b3dfcc4980a35c83391f5984a38f8e440d3f0a1998b03ed3aad5753696d70881ed497ecd3f29237047dce310d7d1b0d464b20012be09069f75bac94212250ef1e705fdcc64db214c096ece135d1ff"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/nbd3', 0x0, 0x11a) setsockopt$inet_mreqsrc(r1, 0x0, 0xe, &(0x7f0000000100)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/iuu_phoenix', 0x80080, 0x1) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x25000000, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x7, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 32) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x40000000000000) 00:04:36 executing program 4: socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x8, 0x0, 0x0, 0x0}) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x5c000000, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x4, 0x7b, "10cc84829284407a5264709ae7836f5cd9a815297fa68a13b2141e820f6a154889804872323d1f03cc9118674b3dfcc4980a35c83391f5984a38f8e440d3f0a1998b03ed3aad5753696d70881ed497ecd3f29237047dce310d7d1b0d464b20012be09069f75bac94212250ef1e705fdcc64db214c096ece135d1ff"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/nbd3', 0x0, 0x11a) setsockopt$inet_mreqsrc(r1, 0x0, 0xe, &(0x7f0000000100)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/iuu_phoenix', 0x80080, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x4, 0x7b, "10cc84829284407a5264709ae7836f5cd9a815297fa68a13b2141e820f6a154889804872323d1f03cc9118674b3dfcc4980a35c83391f5984a38f8e440d3f0a1998b03ed3aad5753696d70881ed497ecd3f29237047dce310d7d1b0d464b20012be09069f75bac94212250ef1e705fdcc64db214c096ece135d1ff"}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/nbd3', 0x0, 0x11a) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0xe, &(0x7f0000000100)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/iuu_phoenix', 0x80080, 0x1) (async) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x9, 0x0, 0x0, 0x0}) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x4, 0x7b, "10cc84829284407a5264709ae7836f5cd9a815297fa68a13b2141e820f6a154889804872323d1f03cc9118674b3dfcc4980a35c83391f5984a38f8e440d3f0a1998b03ed3aad5753696d70881ed497ecd3f29237047dce310d7d1b0d464b20012be09069f75bac94212250ef1e705fdcc64db214c096ece135d1ff"}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/nbd3', 0x0, 0x11a) setsockopt$inet_mreqsrc(r1, 0x0, 0xe, &(0x7f0000000100)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/iuu_phoenix', 0x80080, 0x1) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xffffe000, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xde7d) 00:04:36 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x5, 0x6, 0x1, 0x800}) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xa, 0x0, 0x0, 0x0}) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x17, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0xffffff7f, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xb, 0x0, 0x0, 0x0}) 00:04:36 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x5, 0x6, 0x1, 0x800}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x5, 0x6, 0x1, 0x800}) (async) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x17, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xde7d) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xde7d) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xc, 0x0, 0x0, 0x0}) 00:04:36 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x5, 0x6, 0x1, 0x800}) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0}) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x17, 0x3}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xd, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r2, 0x4008af7c, &(0x7f0000000040)={0x3, 0x401}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x6, 0x200, 0x6, 0x0, 0xb, "99d9da8f788dae4a66c4a3eb85ed98d1a2c3bb"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x335506a797d84853}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:04:36 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0}) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xe, 0x0, 0x0, 0x0}) 00:04:36 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x4, 0x0, 0x0, 0x0}) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x10, 0x0, 0x0, 0x0}) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x335506a797d84853}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x335506a797d84853}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r2, 0x4008af7c, &(0x7f0000000040)={0x3, 0x401}) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (rerun: 64) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x6, 0x200, 0x6, 0x0, 0xb, "99d9da8f788dae4a66c4a3eb85ed98d1a2c3bb"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:36 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x11, 0x0, 0x0, 0x0}) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x5, 0x0, 0x0, 0x0}) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x335506a797d84853}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x335506a797d84853}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) 00:04:36 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x2, 0x4], 0x2) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x12, 0x0, 0x0, 0x0}) 00:04:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r2, 0x4008af7c, &(0x7f0000000040)={0x3, 0x401}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x6, 0x200, 0x6, 0x0, 0xb, "99d9da8f788dae4a66c4a3eb85ed98d1a2c3bb"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x80000000, 0x3f, 0x9, 0x12, "6dadd6498b2fe08cead8b680ab15040914c263"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r2, 0x0, 0x0, 0x80800) getpeername$l2tp(r4, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) 00:04:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x6, 0x0, 0x0, 0x0}) 00:04:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20c401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0xac, 0x2, &(0x7f0000000080)="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"}) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x2, 0x4], 0x2) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x18, 0x0, 0x0, 0x0}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x7, 0x0, 0x0, 0x0}) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x80000000, 0x3f, 0x9, 0x12, "6dadd6498b2fe08cead8b680ab15040914c263"}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) r3 = accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) (async) accept4$inet(r2, 0x0, 0x0, 0x80800) (async) getpeername$l2tp(r4, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) 00:04:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20c401, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0xac, 0x2, &(0x7f0000000080)="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"}) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x25, 0x0, 0x0, 0x0}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x8, 0x0, 0x0, 0x0}) 00:04:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x2, 0x4], 0x2) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x80000000, 0x3f, 0x9, 0x12, "6dadd6498b2fe08cead8b680ab15040914c263"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) (async) accept4$inet(r2, 0x0, 0x0, 0x80800) (async) getpeername$l2tp(r4, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x5c, 0x0, 0x0, 0x0}) 00:04:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x9, 0x0, 0x0, 0x0}) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0, 0x0) 00:04:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20c401, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0xac, 0x2, &(0x7f0000000080)="7d95abf5e6509da37de9c6a88d14639014e0a088a192afee1567f959f4dace0a90265ee775f17cbc5ca551dca8b1235e9935cdf83e99cfc5fa60d4630b8d96e15bf00e4ec64597aa7020eb84b6becfd0b0c0eb4132e11d190a2501cdbe606428467e1d5dcfb633b0055217ca74b57f2daf9d59cd44b57c4298423495ed63675efadfb5322b1f9109f24abce14ba7edc8b4afc85d26a5e911d0fc68dde30c63cf5cd249bc424672c9ec173c6ed24471e1eb3a2ac699345c38d5fdbb2b3fd8c03d593007ef51d0da3001ffc5363b53c0c678ce8f76153d964add570c3d010989d340a1d3d046be725624526504b69af1874101c31a6b76047da364753e4c2e721dcf88f0f44a96111fe3f7326931e487490da0461851398e545b2fd61b2955fd012e93bbb6f37548dad02964a83ee162a7a8e053f6fe2c1af47ee9d3fabe8df14f6922066f48fb9a8d2da3920485a1f9e9d25bc511112c225fa11b789b8b22a639cb67764c349abc307aa8acfb4c3e53700e9a4c4f76130f2aa3734ac7e2ca937472c0692fdb689fb61da3ebe6cf7508bc636a80f2f2807ee4485ccf419f730965c48b98a5ffcbe579ac553f5302570c92d5aea5f2180309afc1072d70a44f0566b699796567dd87436d4623102b7c98d1b6b55378814161c0ff9f0b30650269921131f18c6dbc6b7902d03d91c83f11e65fc42a2aa1989e539af29c01f208a0f5bb9b4144da2edded62f5b6c14323ca3c8135c3c5625aa3da90cfbbcd9db41850557d11d4d5d257d8ae0827994bb07d2d82d2bdad056fbb6ac71a21e556bf8d5dcec3ae462c56553d50594e6df9ff8ade91f25d84af36f98ed0abf005222310767e7e51ac61aecf9f4867c406afefb3bb196bef17dee388d1987401a0d61a49e4976d82c140f3cf6cd0f54ff37906282ca940b8a7c8ab2e9a17f107f774655663ac71b94737892bef0434e085006f43ba26afccca871de5ef9eae22feb467805310f20c75a84bb40f02d9d1a126237db4031067be1ae4201f85a2dc107492db92b06be87e98124b530bbc8156d852ca1d41da8f173256cd3b756aae209d2c0f6eb9a9816d7014628a6bd7616e4664ea8c2fe662da783767b3ea1e21f69a0360236d882415953c8aa5d95506f7215e7b901ee5f427116b1c3530bb4528a2d484bece55a3046c78c6dfbc2d1fd7804746ce5e92dd1abc30d4f8a2c5979a9c6c1d5a6682e6a81bc055dd85031521e9a96c1e16c596a3e5f0032bce1f82ed5cadf0e14fd521e38c27be59fbfc1c3f8238c2f2c4ea6481ee5ae84d56a4ef0e806b55924eb0af01a362385b3ea9f68d996d4e29bf7282ca7359e9cd0b7dd06ba8a7a90e219dfb0164434e5f974ba96f3d07d88fed5c428388b87657824ca1b36cba97f0756d3f4327ba9a3ec37189ab857c4e3efd315ddaff16f793afdafd20cae2b88e"}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20c401, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0xac, 0x2, &(0x7f0000000080)="7d95abf5e6509da37de9c6a88d14639014e0a088a192afee1567f959f4dace0a90265ee775f17cbc5ca551dca8b1235e9935cdf83e99cfc5fa60d4630b8d96e15bf00e4ec64597aa7020eb84b6becfd0b0c0eb4132e11d190a2501cdbe606428467e1d5dcfb633b0055217ca74b57f2daf9d59cd44b57c4298423495ed63675efadfb5322b1f9109f24abce14ba7edc8b4afc85d26a5e911d0fc68dde30c63cf5cd249bc424672c9ec173c6ed24471e1eb3a2ac699345c38d5fdbb2b3fd8c03d593007ef51d0da3001ffc5363b53c0c678ce8f76153d964add570c3d010989d340a1d3d046be725624526504b69af1874101c31a6b76047da364753e4c2e721dcf88f0f44a96111fe3f7326931e487490da0461851398e545b2fd61b2955fd012e93bbb6f37548dad02964a83ee162a7a8e053f6fe2c1af47ee9d3fabe8df14f6922066f48fb9a8d2da3920485a1f9e9d25bc511112c225fa11b789b8b22a639cb67764c349abc307aa8acfb4c3e53700e9a4c4f76130f2aa3734ac7e2ca937472c0692fdb689fb61da3ebe6cf7508bc636a80f2f2807ee4485ccf419f730965c48b98a5ffcbe579ac553f5302570c92d5aea5f2180309afc1072d70a44f0566b699796567dd87436d4623102b7c98d1b6b55378814161c0ff9f0b30650269921131f18c6dbc6b7902d03d91c83f11e65fc42a2aa1989e539af29c01f208a0f5bb9b4144da2edded62f5b6c14323ca3c8135c3c5625aa3da90cfbbcd9db41850557d11d4d5d257d8ae0827994bb07d2d82d2bdad056fbb6ac71a21e556bf8d5dcec3ae462c56553d50594e6df9ff8ade91f25d84af36f98ed0abf005222310767e7e51ac61aecf9f4867c406afefb3bb196bef17dee388d1987401a0d61a49e4976d82c140f3cf6cd0f54ff37906282ca940b8a7c8ab2e9a17f107f774655663ac71b94737892bef0434e085006f43ba26afccca871de5ef9eae22feb467805310f20c75a84bb40f02d9d1a126237db4031067be1ae4201f85a2dc107492db92b06be87e98124b530bbc8156d852ca1d41da8f173256cd3b756aae209d2c0f6eb9a9816d7014628a6bd7616e4664ea8c2fe662da783767b3ea1e21f69a0360236d882415953c8aa5d95506f7215e7b901ee5f427116b1c3530bb4528a2d484bece55a3046c78c6dfbc2d1fd7804746ce5e92dd1abc30d4f8a2c5979a9c6c1d5a6682e6a81bc055dd85031521e9a96c1e16c596a3e5f0032bce1f82ed5cadf0e14fd521e38c27be59fbfc1c3f8238c2f2c4ea6481ee5ae84d56a4ef0e806b55924eb0af01a362385b3ea9f68d996d4e29bf7282ca7359e9cd0b7dd06ba8a7a90e219dfb0164434e5f974ba96f3d07d88fed5c428388b87657824ca1b36cba97f0756d3f4327ba9a3ec37189ab857c4e3efd315ddaff16f793afdafd20cae2b88e"}) (async) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x300, 0x0, 0x0, 0x0}) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0, 0x0) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xa, 0x0, 0x0, 0x0}) 00:04:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x500, 0x0, 0x0, 0x0}) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0, 0x0) (async) 00:04:37 executing program 1: ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x400, 0xb0, "182ebcb4410155133f4b135395ffd74d12adc94e111bb881fe33cdc96a05b4f9d7f8b53d1736033554f341a140c8ff8e11590b81af5b6ce4f7dbd69a71e96f4f1c7b22dacd0a7f2d4957a9c736aa1178a68ef37fe95125a49a9bad5613d1f858383ccc8ede3d0b1da40863c3dfa36730d4d354a3dae741839fd5b7be718c993e054b7b4b2fe951c788147db4d824d89ef01bc8714f93371a97c8dcef4d4fecdb5f552ccfd26cff5471f6e13c1221cc26"}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xfff, 0xffffffffffffffff, 0x80000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)={0x6, 0x0, [{0x100000, 0x34, &(0x7f0000000100)=""/52}, {0xa802, 0x1000, &(0x7f0000000140)=""/4096}, {0x1000, 0x2, &(0x7f0000001140)=""/2}, {0x0, 0x39, &(0x7f0000001180)=""/57}, {0xa000, 0x1000, &(0x7f00000011c0)=""/4096}, {0x3000, 0xc0, &(0x7f00000021c0)=""/192}]}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xb, 0x0, 0x0, 0x0}) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x600, 0x0, 0x0, 0x0}) 00:04:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='\x00') (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) ioctl$KDDISABIO(r0, 0x4b37) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xaa9, r1, 0x80000}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) 00:04:37 executing program 1: ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x400, 0xb0, "182ebcb4410155133f4b135395ffd74d12adc94e111bb881fe33cdc96a05b4f9d7f8b53d1736033554f341a140c8ff8e11590b81af5b6ce4f7dbd69a71e96f4f1c7b22dacd0a7f2d4957a9c736aa1178a68ef37fe95125a49a9bad5613d1f858383ccc8ede3d0b1da40863c3dfa36730d4d354a3dae741839fd5b7be718c993e054b7b4b2fe951c788147db4d824d89ef01bc8714f93371a97c8dcef4d4fecdb5f552ccfd26cff5471f6e13c1221cc26"}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xfff, 0xffffffffffffffff, 0x80000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)={0x6, 0x0, [{0x100000, 0x34, &(0x7f0000000100)=""/52}, {0xa802, 0x1000, &(0x7f0000000140)=""/4096}, {0x1000, 0x2, &(0x7f0000001140)=""/2}, {0x0, 0x39, &(0x7f0000001180)=""/57}, {0xa000, 0x1000, &(0x7f00000011c0)=""/4096}, {0x3000, 0xc0, &(0x7f00000021c0)=""/192}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xc, 0x0, 0x0, 0x0}) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x700, 0x0, 0x0, 0x0}) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x900, 0x0, 0x0, 0x0}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xd, 0x0, 0x0, 0x0}) 00:04:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='\x00') (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) (async) 00:04:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) ioctl$KDDISABIO(r0, 0x4b37) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xaa9, r1, 0x80000}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xaa9, r1, 0x80000}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) 00:04:37 executing program 1: ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000000)={0x400, 0xb0, "182ebcb4410155133f4b135395ffd74d12adc94e111bb881fe33cdc96a05b4f9d7f8b53d1736033554f341a140c8ff8e11590b81af5b6ce4f7dbd69a71e96f4f1c7b22dacd0a7f2d4957a9c736aa1178a68ef37fe95125a49a9bad5613d1f858383ccc8ede3d0b1da40863c3dfa36730d4d354a3dae741839fd5b7be718c993e054b7b4b2fe951c788147db4d824d89ef01bc8714f93371a97c8dcef4d4fecdb5f552ccfd26cff5471f6e13c1221cc26"}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xfff, 0xffffffffffffffff, 0x80000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)={0x6, 0x0, [{0x100000, 0x34, &(0x7f0000000100)=""/52}, {0xa802, 0x1000, &(0x7f0000000140)=""/4096}, {0x1000, 0x2, &(0x7f0000001140)=""/2}, {0x0, 0x39, &(0x7f0000001180)=""/57}, {0xa000, 0x1000, &(0x7f00000011c0)=""/4096}, {0x3000, 0xc0, &(0x7f00000021c0)=""/192}]}) (async, rerun: 32) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xa00, 0x0, 0x0, 0x0}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xe, 0x0, 0x0, 0x0}) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r1, 0x503000) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x80000000, 0x9, 0x9, 0x2, 0x2, "4c259c094b6decf6ef5f03ea29ef6043e70b80", 0x4}) 00:04:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) (async) ioctl$KDDISABIO(r0, 0x4b37) (async, rerun: 64) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xaa9, r1, 0x80000}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) 00:04:37 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 00:04:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xfffffffe, 0x4, 0x0}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3f, 0xee2, 0x5, 0x6674, 0x4, "0c129e16a629c02b753bf1d08e204817e371ff", 0x1ae, 0x101}) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xb00, 0x0, 0x0, 0x0}) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r1, 0x503000) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x80000000, 0x9, 0x9, 0x2, 0x2, "4c259c094b6decf6ef5f03ea29ef6043e70b80", 0x4}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x10, 0x0, 0x0, 0x0}) 00:04:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xfffffffe, 0x4, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3f, 0xee2, 0x5, 0x6674, 0x4, "0c129e16a629c02b753bf1d08e204817e371ff", 0x1ae, 0x101}) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r1, 0x503000) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x80000000, 0x9, 0x9, 0x2, 0x2, "4c259c094b6decf6ef5f03ea29ef6043e70b80", 0x4}) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r2, 0xd57d12ba1a23cd57, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xc00, 0x0, 0x0, 0x0}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x11, 0x0, 0x0, 0x0}) 00:04:37 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1, r0, 0x80003}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x5, 0x2, 0x5}, 0x48) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xd00, 0x0, 0x0, 0x0}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x12, 0x0, 0x0, 0x0}) 00:04:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xfffffffe, 0x4, 0x0}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3f, 0xee2, 0x5, 0x6674, 0x4, "0c129e16a629c02b753bf1d08e204817e371ff", 0x1ae, 0x101}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xfffffffe, 0x4, 0x0}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3f, 0xee2, 0x5, 0x6674, 0x4, "0c129e16a629c02b753bf1d08e204817e371ff", 0x1ae, 0x101}) (async) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r2, 0xd57d12ba1a23cd57, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1, r0, 0x80003}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x5, 0x2, 0x5}, 0x48) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:37 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b32, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xe00, 0x0, 0x0, 0x0}) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x18, 0x0, 0x0, 0x0}) 00:04:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x511a00, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:37 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r2, 0xd57d12ba1a23cd57, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x1, r0, 0x80003}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x5, 0x2, 0x5}, 0x48) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1100, 0x0, 0x0, 0x0}) 00:04:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x25, 0x0, 0x0, 0x0}) 00:04:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x511a00, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x511a00, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) 00:04:37 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/net2272', 0x800, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd9) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4], 0x2) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1200, 0x0, 0x0, 0x0}) 00:04:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 00:04:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x5c, 0x0, 0x0, 0x0}) 00:04:37 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/net2272', 0x800, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd9) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4], 0x2) 00:04:37 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x511a00, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1800, 0x0, 0x0, 0x0}) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x300, 0x0, 0x0, 0x0}) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:38 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/net2272', 0x800, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd9) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd9) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4], 0x2) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x9, 0x2, 0x5768af3d, 0x3fe, 0x2, "a315bacc96e8a6331355107f497d3914a18390"}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x2500, 0x0, 0x0, 0x0}) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x500, 0x0, 0x0, 0x0}) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:38 executing program 4: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x5c00, 0x0, 0x0, 0x0}) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x600, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x9, 0x2, 0x5768af3d, 0x3fe, 0x2, "a315bacc96e8a6331355107f497d3914a18390"}) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) 00:04:38 executing program 4: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x700, 0x0, 0x0, 0x0}) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0xe3, "2b948519fd14fecaf4dbb0b4570eba7327b7ddce269abcdf63232ca928409d2ea2bd0a865bb907bff1bf1bc34789932abb2dc564d87e4ede2f248bf2c94f76974b20fc26efcad0f6abe1263f67565b30b8c20a3e08ab4f2dacaf8b17fb30e87f2de1fc18576408fc96cf31145cf75ee0fb39a651ae78665f845b499c22b322a2c8df51b9d03b10025ca351f8bfe474fa47afdafd9380ff293b7930750168b7acfe8a43427714de5592c5b1ec8dd2c5f652fec4ba7efe90ca3469a76f83faf4e3218909ef60c2c10d1d627d99430e6f6bfb1e36293a0f1b38b82515c314391f8b5e6f96"}, &(0x7f0000000140)=0x107) 00:04:38 executing program 4: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) 00:04:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x9, 0x2, 0x5768af3d, 0x3fe, 0x2, "a315bacc96e8a6331355107f497d3914a18390"}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x900, 0x0, 0x0, 0x0}) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0xe3, "2b948519fd14fecaf4dbb0b4570eba7327b7ddce269abcdf63232ca928409d2ea2bd0a865bb907bff1bf1bc34789932abb2dc564d87e4ede2f248bf2c94f76974b20fc26efcad0f6abe1263f67565b30b8c20a3e08ab4f2dacaf8b17fb30e87f2de1fc18576408fc96cf31145cf75ee0fb39a651ae78665f845b499c22b322a2c8df51b9d03b10025ca351f8bfe474fa47afdafd9380ff293b7930750168b7acfe8a43427714de5592c5b1ec8dd2c5f652fec4ba7efe90ca3469a76f83faf4e3218909ef60c2c10d1d627d99430e6f6bfb1e36293a0f1b38b82515c314391f8b5e6f96"}, &(0x7f0000000140)=0x107) 00:04:38 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x2000, &(0x7f0000001000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x3000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_aloop', 0x400, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x64040, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) syz_open_pts(r5, 0x24140) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xa00, 0x0, 0x0, 0x0}) 00:04:38 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x2000, &(0x7f0000001000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x2000, &(0x7f0000001000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) (async) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0xe3, "2b948519fd14fecaf4dbb0b4570eba7327b7ddce269abcdf63232ca928409d2ea2bd0a865bb907bff1bf1bc34789932abb2dc564d87e4ede2f248bf2c94f76974b20fc26efcad0f6abe1263f67565b30b8c20a3e08ab4f2dacaf8b17fb30e87f2de1fc18576408fc96cf31145cf75ee0fb39a651ae78665f845b499c22b322a2c8df51b9d03b10025ca351f8bfe474fa47afdafd9380ff293b7930750168b7acfe8a43427714de5592c5b1ec8dd2c5f652fec4ba7efe90ca3469a76f83faf4e3218909ef60c2c10d1d627d99430e6f6bfb1e36293a0f1b38b82515c314391f8b5e6f96"}, &(0x7f0000000140)=0x107) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x4000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_aloop', 0x400, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x64040, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) syz_open_pts(r5, 0x24140) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) 00:04:38 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x2000, &(0x7f0000001000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xa10, 0x0, 0x0, 0x0}) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1, 0x1b, 0x8a}) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x5000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_aloop', 0x400, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x64040, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_aloop', 0x400, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x64040, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0x90) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) (async) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xb00, 0x0, 0x0, 0x0}) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) syz_open_pts(r5, 0x24140) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) 00:04:38 executing program 4: r0 = eventfd2(0x8, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @private=0xa010102, @empty}, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r0) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1, 0x1b, 0x8a}) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x6000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x24102, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5603, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x3}, 0x8) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x2, r0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000140)=0x10001, 0x8) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xc00, 0x0, 0x0, 0x0}) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1, 0x1b, 0x8a}) (rerun: 32) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x20, 0x1000000000000000, 0x20, 0x8}, 0x48) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xd00, 0x0, 0x0, 0x0}) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x7000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 4: r0 = eventfd2(0x8, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @private=0xa010102, @empty}, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r0) 00:04:38 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x24102, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 64) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) (rerun: 64) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5603, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x3}, 0x8) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x2, r0, 0x1}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000140)=0x10001, 0x8) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xe00, 0x0, 0x0, 0x0}) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x8000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x20, 0x1000000000000000, 0x20, 0x8}, 0x48) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (rerun: 64) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x100a, 0x0, 0x0, 0x0}) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x9000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x24102, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x5603, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x3}, 0x8) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x2, r0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000140)=0x10001, 0x8) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xa000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 4: r0 = eventfd2(0x8, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @private=0xa010102, @empty}, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r0) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x20, 0x1000000000000000, 0x20, 0x8}, 0x48) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x1100, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xb000000, 0x0, 0x0, 0x0}) 00:04:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x1200, 0x0, 0x0, 0x0}) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f0000000080)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xc000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x1800, 0x0, 0x0, 0x0}) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (rerun: 32) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xd000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f0000000080)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x2500, 0x0, 0x0, 0x0}) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xe000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f0000000080)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x5c00, 0x0, 0x0, 0x0}) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async, rerun: 32) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4c200, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000440)={0x401, 0x18, &(0x7f0000000040)="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"}) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x10000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xe0ffff, 0x0, 0x0, 0x0}) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) (async) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4c200, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000440)={0x401, 0x18, &(0x7f0000000040)="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"}) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x11000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x12000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async, rerun: 32) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4c200, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000440)={0x401, 0x18, &(0x7f0000000040)="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"}) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x18000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xdb}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x25000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) 00:04:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xdb}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xdb}}, 0x24) (async) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) (async) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x3000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x5c000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xdb}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x4000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_open_pts(r1, 0x111182) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 00:04:39 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x1b, 0x0, 0x0, 0x0) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900)}}, 0x2e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r4, 0x1000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x24000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @ib={0x1b, 0x0, 0x7, {"99f1778ee912c5a6e5459e27bda9fdc1"}, 0xfff, 0x100000000, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r3, 0xfe, "0ef62a", "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"}}, 0x110) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r2, 0x0, 0x0, 0x1}}, 0x20) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0xffffff7f, 0x0, 0x0, 0x0}) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x5000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_open_pts(r1, 0x111182) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000000)) (async, rerun: 32) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900)}}, 0x2e) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r4, 0x1000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x24000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @ib={0x1b, 0x0, 0x7, {"99f1778ee912c5a6e5459e27bda9fdc1"}, 0xfff, 0x100000000, 0x2}}}, 0x118) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r3, 0xfe, "0ef62a", "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"}}, 0x110) (async, rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r2, 0x0, 0x0, 0x1}}, 0x20) (async, rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_open_pts(r1, 0x111182) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x6000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:39 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x1b, 0x0, 0x0, 0x0) 00:04:39 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x1}) ioctl$I2C_PEC(r0, 0x708, 0x9113) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@local, @empty}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900)}}, 0x2e) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r4, 0x1000, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x24000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @ib={0x1b, 0x0, 0x7, {"99f1778ee912c5a6e5459e27bda9fdc1"}, 0xfff, 0x100000000, 0x2}}}, 0x118) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r3, 0xfe, "0ef62a", "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"}}, 0x110) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r2, 0x0, 0x0, 0x1}}, 0x20) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x7000000, 0x0, 0x0, 0x0}) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2, 0x0, 0x0}) 00:04:39 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) recvfrom$rxrpc(r0, 0x0, 0x1b, 0x0, 0x0, 0x0) 00:04:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b3a, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) 00:04:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000000)) (async, rerun: 64) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:39 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x1}) ioctl$I2C_PEC(r0, 0x708, 0x9113) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@local, @empty}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@local, @empty}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x3, 0x0, 0x0}) 00:04:39 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x90, "70980aca12e7b5b65bf727a48b2f95cbb1cdf8291d1bf0264acff71f79d168d547fa1de96733b8bff61b9f68c56dd4d5ff0cf397684c2c5f909986ff6c66e30a042a4febe58b39fce831dd82156b2ab4445b8eca5aa29c59184703cc87c822900e3d117b9d8bbdf0118b3fb177542ae1917c5e37bbaa2aa1f70a2e23542903301da66533dccfcb08992f57575ff94e33"}, &(0x7f0000000540)=0xb4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/counter', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r2, 0x30, 0x0, @in6={0xa, 0x4e20, 0xfd3b, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfffffffe}}}, 0xa0) r3 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x80000) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000440)=0xa679) getpeername$l2tp(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0xde, 0xfdfb, "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", 0x5, 0x1f, 0x6, 0x5b, 0x7f, 0x0, 0x1}, r2}}, 0x120) 00:04:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x8000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x1}) ioctl$I2C_PEC(r0, 0x708, 0x9113) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@local, @empty}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async, rerun: 64) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDFONTOP_GET(r2, 0x4b3a, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x9000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x90, "70980aca12e7b5b65bf727a48b2f95cbb1cdf8291d1bf0264acff71f79d168d547fa1de96733b8bff61b9f68c56dd4d5ff0cf397684c2c5f909986ff6c66e30a042a4febe58b39fce831dd82156b2ab4445b8eca5aa29c59184703cc87c822900e3d117b9d8bbdf0118b3fb177542ae1917c5e37bbaa2aa1f70a2e23542903301da66533dccfcb08992f57575ff94e33"}, &(0x7f0000000540)=0xb4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/counter', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r2, 0x30, 0x0, @in6={0xa, 0x4e20, 0xfd3b, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfffffffe}}}, 0xa0) r3 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x80000) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000440)=0xa679) (async) getpeername$l2tp(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0xde, 0xfdfb, "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", 0x5, 0x1f, 0x6, 0x5b, 0x7f, 0x0, 0x1}, r2}}, 0x120) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x4, 0x0, 0x0}) 00:04:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/64, &(0x7f0000000080)=""/72, &(0x7f0000000200)=""/139, 0x4}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1f) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xa000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 1: getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x4, 0x5d, [0x6, 0x81, 0x0, 0x101, 0x4, 0x2], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/93}, &(0x7f0000000180)=0x78) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x90, "70980aca12e7b5b65bf727a48b2f95cbb1cdf8291d1bf0264acff71f79d168d547fa1de96733b8bff61b9f68c56dd4d5ff0cf397684c2c5f909986ff6c66e30a042a4febe58b39fce831dd82156b2ab4445b8eca5aa29c59184703cc87c822900e3d117b9d8bbdf0118b3fb177542ae1917c5e37bbaa2aa1f70a2e23542903301da66533dccfcb08992f57575ff94e33"}, &(0x7f0000000540)=0xb4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/counter', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r2, 0x30, 0x0, @in6={0xa, 0x4e20, 0xfd3b, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfffffffe}}}, 0xa0) r3 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x80000) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000440)=0xa679) getpeername$l2tp(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0xde, 0xfdfb, "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", 0x5, 0x1f, 0x6, 0x5b, 0x7f, 0x0, 0x1}, r2}}, 0x120) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async) socket$inet(0x2, 0x3, 0x6) (async) accept4$inet(r0, 0x0, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x90, "70980aca12e7b5b65bf727a48b2f95cbb1cdf8291d1bf0264acff71f79d168d547fa1de96733b8bff61b9f68c56dd4d5ff0cf397684c2c5f909986ff6c66e30a042a4febe58b39fce831dd82156b2ab4445b8eca5aa29c59184703cc87c822900e3d117b9d8bbdf0118b3fb177542ae1917c5e37bbaa2aa1f70a2e23542903301da66533dccfcb08992f57575ff94e33"}, &(0x7f0000000540)=0xb4) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/counter', 0x80000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r2, 0x30, 0x0, @in6={0xa, 0x4e20, 0xfd3b, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfffffffe}}}, 0xa0) (async) accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x80000) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000440)=0xa679) (async) getpeername$l2tp(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0xde, 0xfdfb, "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", 0x5, 0x1f, 0x6, 0x5b, 0x7f, 0x0, 0x1}, r2}}, 0x120) (async) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5, 0x0, 0x0}) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xb000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b3a, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) (async) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) 00:04:40 executing program 1: getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x4, 0x5d, [0x6, 0x81, 0x0, 0x101, 0x4, 0x2], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/93}, &(0x7f0000000180)=0x78) (async, rerun: 32) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/64, &(0x7f0000000080)=""/72, &(0x7f0000000200)=""/139, 0x4}) (async, rerun: 64) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1f) (async) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x6, 0x0, 0x0}) 00:04:40 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e24, 0xb9a4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r0}}, 0x38) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xc000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x8, 0x8, 0x7fffffff, 0x5, "3a2642e0d0c3d0cda14921e2c43621c56f1f22"}) 00:04:40 executing program 1: getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x4, 0x5d, [0x6, 0x81, 0x0, 0x101, 0x4, 0x2], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/93}, &(0x7f0000000180)=0x78) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x7, 0x0, 0x0}) 00:04:40 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e24, 0xb9a4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r0}}, 0x38) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e24, 0xb9a4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r0}}, 0x38) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) (async) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xd000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/64, &(0x7f0000000080)=""/72, &(0x7f0000000200)=""/139, 0x4}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/64, &(0x7f0000000080)=""/72, &(0x7f0000000200)=""/139, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1f) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:04:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000080)={0x3, 0x55}) 00:04:40 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e24, 0xb9a4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r0}}, 0x38) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xe000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x8, 0x8, 0x7fffffff, 0x5, "3a2642e0d0c3d0cda14921e2c43621c56f1f22"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x8, 0x8, 0x7fffffff, 0x5, "3a2642e0d0c3d0cda14921e2c43621c56f1f22"}) (async) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x8, 0x0, 0x0}) 00:04:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000080)={0x3, 0x55}) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x9, 0x0, 0x0}) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x10000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x80000001}}, 0x24) 00:04:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000), &(0x7f0000000040)) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xa, 0x0, 0x0}) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x100a0000, 0x0, 0x0, 0x0}) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x80000001}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x80000001}}, 0x24) (async) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xb, 0x0, 0x0}) 00:04:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000080)={0x3, 0x55}) 00:04:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x8, 0x8, 0x7fffffff, 0x5, "3a2642e0d0c3d0cda14921e2c43621c56f1f22"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x8, 0x8, 0x7fffffff, 0x5, "3a2642e0d0c3d0cda14921e2c43621c56f1f22"}) 00:04:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000), &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) socket$inet(0x2, 0x3, 0x6) (async) accept4$inet(r0, 0x0, 0x0, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) (async) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x11000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x80000001}}, 0x24) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xc, 0x0, 0x0}) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x12000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xd, 0x0, 0x0}) 00:04:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe89, 0x30002, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x4c0200, 0x2) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) r1 = eventfd2(0x0, 0x801) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) 00:04:40 executing program 3: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ums_realtek', 0x200000, 0x48) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x8, 0xffff, 0x4, 0x6, 0x40, "3b8d14957e2efdef1ac562dd39829044122e26", 0x0, 0xffffffe1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) write$qrtrtun(r2, &(0x7f00000000c0)="1b80b82d3a07dec52e29d4f04509cf9beb86b52cba1e28d2aeccd311f2066c9eac113b76a1795f3c6ff510a92f220293bf47939969286b40a5e667781bb0140657fea6bd5659e63fd44d7a2ccc86a33a98c200789e2e7de8874089404550c6d4bd065add10fd3e0e27ec5216b36d81cdc7513ed89d1fee73f7", 0x79) 00:04:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x18000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe89, 0x30002, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x4c0200, 0x2) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) r1 = eventfd2(0x0, 0x801) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe89, 0x30002, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x4c0200, 0x2) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) (async) eventfd2(0x0, 0x801) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) (async) 00:04:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (rerun: 32) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xe, 0x0, 0x0}) 00:04:40 executing program 3: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ums_realtek', 0x200000, 0x48) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x8, 0xffff, 0x4, 0x6, 0x40, "3b8d14957e2efdef1ac562dd39829044122e26", 0x0, 0xffffffe1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) write$qrtrtun(r2, &(0x7f00000000c0)="1b80b82d3a07dec52e29d4f04509cf9beb86b52cba1e28d2aeccd311f2066c9eac113b76a1795f3c6ff510a92f220293bf47939969286b40a5e667781bb0140657fea6bd5659e63fd44d7a2ccc86a33a98c200789e2e7de8874089404550c6d4bd065add10fd3e0e27ec5216b36d81cdc7513ed89d1fee73f7", 0x79) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x25000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:40 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe89, 0x30002, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x4c0200, 0x2) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) r1 = eventfd2(0x0, 0x801) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe89, 0x30002, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq', 0x4c0200, 0x2) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000080)) (async) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) (async) eventfd2(0x0, 0x801) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1) (async) 00:04:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x10, 0x0, 0x0}) 00:04:40 executing program 3: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ums_realtek', 0x200000, 0x48) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x8, 0xffff, 0x4, 0x6, 0x40, "3b8d14957e2efdef1ac562dd39829044122e26", 0x0, 0xffffffe1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) write$qrtrtun(r2, &(0x7f00000000c0)="1b80b82d3a07dec52e29d4f04509cf9beb86b52cba1e28d2aeccd311f2066c9eac113b76a1795f3c6ff510a92f220293bf47939969286b40a5e667781bb0140657fea6bd5659e63fd44d7a2ccc86a33a98c200789e2e7de8874089404550c6d4bd065add10fd3e0e27ec5216b36d81cdc7513ed89d1fee73f7", 0x79) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDDISABIO(r0, 0x4b37) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1f) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ums_realtek', 0x200000, 0x48) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x8, 0xffff, 0x4, 0x6, 0x40, "3b8d14957e2efdef1ac562dd39829044122e26", 0x0, 0xffffffe1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) write$qrtrtun(r2, &(0x7f00000000c0)="1b80b82d3a07dec52e29d4f04509cf9beb86b52cba1e28d2aeccd311f2066c9eac113b76a1795f3c6ff510a92f220293bf47939969286b40a5e667781bb0140657fea6bd5659e63fd44d7a2ccc86a33a98c200789e2e7de8874089404550c6d4bd065add10fd3e0e27ec5216b36d81cdc7513ed89d1fee73f7", 0x79) (async) 00:04:40 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/k3_udma_glue_chan', 0x4001, 0x20) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffe, '\x00', 0x0, r1, 0x2, 0x1, 0x1}, 0x48) 00:04:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x5c000000, 0x0, 0x0, 0x0}) 00:04:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x9, 0x0, [{0x100000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x4, 0xc3, &(0x7f0000000040)=""/195}, {0x2, 0xa9, &(0x7f0000000140)=""/169}, {0x8000, 0xb1, &(0x7f0000000200)=""/177}, {0x0, 0x30, &(0x7f00000002c0)=""/48}, {0x4, 0x17, &(0x7f0000000300)=""/23}, {0x1000, 0x0, &(0x7f0000000340)}, {0x0, 0x71, &(0x7f0000000380)=""/113}, {0x1000, 0x20, &(0x7f0000000400)=""/32}]}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000340)={0x112, 0xb, &(0x7f0000000580)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$KDDISABIO(r2, 0x4b37) 00:04:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xffffe000, 0x0, 0x0, 0x0}) 00:04:40 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/k3_udma_glue_chan', 0x4001, 0x20) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffe, '\x00', 0x0, r1, 0x2, 0x1, 0x1}, 0x48) 00:04:40 executing program 1: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000480)={0x0, 0x7fffffff, 0xfff, 0x0, 0x7}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, r0, 0x2}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1a, 0x20, 0x13a, &(0x7f0000000040)}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x11, 0x0, 0x0}) 00:04:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0xffffff7f, 0x0, 0x0, 0x0}) 00:04:41 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3, 0x30, 0x5, 0x9, 0x19, "d16d02bd061388ed75c7837998d4e7f4582bee"}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) read$midi(r0, &(0x7f0000000080)=""/25, 0x19) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:41 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/k3_udma_glue_chan', 0x4001, 0x20) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffe, '\x00', 0x0, r1, 0x2, 0x1, 0x1}, 0x48) 00:04:41 executing program 1: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000480)={0x0, 0x7fffffff, 0xfff, 0x0, 0x7}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, r0, 0x2}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1a, 0x20, 0x13a, &(0x7f0000000040)}) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1a, 0x20, 0x13a, &(0x7f0000000040)}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x9, 0x0, [{0x100000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x4, 0xc3, &(0x7f0000000040)=""/195}, {0x2, 0xa9, &(0x7f0000000140)=""/169}, {0x8000, 0xb1, &(0x7f0000000200)=""/177}, {0x0, 0x30, &(0x7f00000002c0)=""/48}, {0x4, 0x17, &(0x7f0000000300)=""/23}, {0x1000, 0x0, &(0x7f0000000340)}, {0x0, 0x71, &(0x7f0000000380)=""/113}, {0x1000, 0x20, &(0x7f0000000400)=""/32}]}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000340)={0x112, 0xb, &(0x7f0000000580)="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"}) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000340)={0x112, 0xb, &(0x7f0000000580)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$KDDISABIO(r2, 0x4b37) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x12, 0x0, 0x0}) 00:04:41 executing program 1: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000480)={0x0, 0x7fffffff, 0xfff, 0x0, 0x7}) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, r0, 0x2}) (rerun: 64) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1a, 0x20, 0x13a, &(0x7f0000000040)}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:41 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x259fdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x4000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ib_iser', 0x400000, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x24) 00:04:41 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3, 0x30, 0x5, 0x9, 0x19, "d16d02bd061388ed75c7837998d4e7f4582bee"}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) read$midi(r0, &(0x7f0000000080)=""/25, 0x19) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3, 0x30, 0x5, 0x9, 0x19, "d16d02bd061388ed75c7837998d4e7f4582bee"}) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) read$midi(r0, &(0x7f0000000080)=""/25, 0x19) (async) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) (async) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x18, 0x0, 0x0}) 00:04:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:41 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (rerun: 64) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x259fdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x4000000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ib_iser', 0x400000, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x24) 00:04:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2, 0x0, 0x0}) 00:04:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async, rerun: 32) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x9, 0x0, [{0x100000, 0x1000, &(0x7f0000000a40)=""/4096}, {0x4, 0xc3, &(0x7f0000000040)=""/195}, {0x2, 0xa9, &(0x7f0000000140)=""/169}, {0x8000, 0xb1, &(0x7f0000000200)=""/177}, {0x0, 0x30, &(0x7f00000002c0)=""/48}, {0x4, 0x17, &(0x7f0000000300)=""/23}, {0x1000, 0x0, &(0x7f0000000340)}, {0x0, 0x71, &(0x7f0000000380)=""/113}, {0x1000, 0x20, &(0x7f0000000400)=""/32}]}) (async, rerun: 32) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) (rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000340)={0x112, 0xb, &(0x7f0000000580)="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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDDISABIO(r2, 0x4b37) 00:04:41 executing program 3: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3, 0x30, 0x5, 0x9, 0x19, "d16d02bd061388ed75c7837998d4e7f4582bee"}) (async) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3, 0x30, 0x5, 0x9, 0x19, "d16d02bd061388ed75c7837998d4e7f4582bee"}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010102}}, 0x24) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) read$midi(r0, &(0x7f0000000080)=""/25, 0x19) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b3a, 0x0) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x25, 0x0, 0x0}) 00:04:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x3, 0x0, 0x0}) 00:04:41 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0xc0045878, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x259fdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x4000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ib_iser', 0x400000, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x24) 00:04:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x8dc, 0x1f, 0x5, 0xffff, 0x8, "999e40e9c0c4439e48d661cfb6300979da7d8b", 0x90bb, 0xffff}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/sch_htb', 0x0, 0xa0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', 0x0, r3, 0x1, 0x3, 0x1}, 0x48) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000100)) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5c, 0x0, 0x0}) 00:04:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x300, 0x0, 0x0}) 00:04:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x8dc, 0x1f, 0x5, 0xffff, 0x8, "999e40e9c0c4439e48d661cfb6300979da7d8b", 0x90bb, 0xffff}) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/sch_htb', 0x0, 0xa0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', 0x0, r3, 0x1, 0x3, 0x1}, 0x48) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) 00:04:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x4, 0x0, 0x0}) 00:04:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1ff, 0x80, 0x3, 0x8, 0x1, "13e1f790d60f740858a7b946f188cc2b5f29ec"}) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000100)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 00:04:42 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0, 0x0) 00:04:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x4, 0x40, 0x8, 0x8fb1, 0x5, "d9886221ca0d9244c603fca6dc768ede91f41f"}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5, 0x0, 0x0}) 00:04:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x8dc, 0x1f, 0x5, 0xffff, 0x8, "999e40e9c0c4439e48d661cfb6300979da7d8b", 0x90bb, 0xffff}) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/sch_htb', 0x0, 0xa0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', 0x0, r3, 0x1, 0x3, 0x1}, 0x48) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000100)) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x8dc, 0x1f, 0x5, 0xffff, 0x8, "999e40e9c0c4439e48d661cfb6300979da7d8b", 0x90bb, 0xffff}) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/sch_htb', 0x0, 0xa0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', 0x0, r3, 0x1, 0x3, 0x1}, 0x48) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) (async) 00:04:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x500, 0x0, 0x0}) 00:04:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x600, 0x0, 0x0}) 00:04:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x6, 0x0, 0x0}) 00:04:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async, rerun: 32) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1ff, 0x80, 0x3, 0x8, 0x1, "13e1f790d60f740858a7b946f188cc2b5f29ec"}) (async, rerun: 32) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000100)) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) (async) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) 00:04:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 32) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x4, 0x40, 0x8, 0x8fb1, 0x5, "d9886221ca0d9244c603fca6dc768ede91f41f"}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:42 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0, 0x0) (async) 00:04:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 00:04:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x700, 0x0, 0x0}) 00:04:42 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0, 0x0) 00:04:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x7, 0x0, 0x0}) 00:04:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x900, 0x0, 0x0}) 00:04:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) 00:04:42 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x7, 0x2, 0x0, 0x9}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x94, 0x400c00) write$midi(r1, &(0x7f0000000040)="a254f0f5fb841a8d425075d631c1ad86f1728aae36d99a82d86702c92b45547d35d6ab4e9eda8b61d99a2b2825b56256cc4954a3d7e2fa0102d3dfba58150fa68002949f8d81438019e12cfd1469e310beecd5cb54b0a4b62ac16742628558416c54a58dbbf23b327e4f893d541f65a36019a811f48a9061490464427947128230b3c3732fba95bb6bfc41681f59009ac4316460225ddd9c64c6e1f236c824b855304b004fdc549cd65e4e669f2ddb9df5baed2449a6837c659458", 0xbb) 00:04:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x4, 0x40, 0x8, 0x8fb1, 0x5, "d9886221ca0d9244c603fca6dc768ede91f41f"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xa00, 0x0, 0x0}) 00:04:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1ff, 0x80, 0x3, 0x8, 0x1, "13e1f790d60f740858a7b946f188cc2b5f29ec"}) (async) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000100)) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) (async, rerun: 32) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) (rerun: 32) 00:04:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x8, 0x0, 0x0}) 00:04:42 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 00:04:42 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x7, 0x2, 0x0, 0x9}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x94, 0x400c00) write$midi(r1, &(0x7f0000000040)="a254f0f5fb841a8d425075d631c1ad86f1728aae36d99a82d86702c92b45547d35d6ab4e9eda8b61d99a2b2825b56256cc4954a3d7e2fa0102d3dfba58150fa68002949f8d81438019e12cfd1469e310beecd5cb54b0a4b62ac16742628558416c54a58dbbf23b327e4f893d541f65a36019a811f48a9061490464427947128230b3c3732fba95bb6bfc41681f59009ac4316460225ddd9c64c6e1f236c824b855304b004fdc549cd65e4e669f2ddb9df5baed2449a6837c659458", 0xbb) 00:04:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xb00, 0x0, 0x0}) 00:04:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x401, r0, 0x1}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, 0x0) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x9, 0x0, 0x0}) 00:04:43 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x7, 0x2, 0x0, 0x9}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x94, 0x400c00) write$midi(r1, &(0x7f0000000040)="a254f0f5fb841a8d425075d631c1ad86f1728aae36d99a82d86702c92b45547d35d6ab4e9eda8b61d99a2b2825b56256cc4954a3d7e2fa0102d3dfba58150fa68002949f8d81438019e12cfd1469e310beecd5cb54b0a4b62ac16742628558416c54a58dbbf23b327e4f893d541f65a36019a811f48a9061490464427947128230b3c3732fba95bb6bfc41681f59009ac4316460225ddd9c64c6e1f236c824b855304b004fdc549cd65e4e669f2ddb9df5baed2449a6837c659458", 0xbb) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x10000, 0x80000001, 0x401, 0x80000000, 0x19, "ff1f802c215a8f01d30ab61fbbb913ef83e372"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xc00, 0x0, 0x0}) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000000)={0x1, 0x400}) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xa, 0x0, 0x0}) 00:04:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x401, r0, 0x1}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, 0x0) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000000)={0x1, 0x400}) 00:04:43 executing program 4: syz_open_dev$dmmidi(&(0x7f00000001c0), 0x3, 0x4000) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x4, 0xff, 0x3, 0x7, 0x1000}, &(0x7f0000000040)={0x9, 0x4a, 0x2, 0x6d4, 0x0, 0x1, 0x8, 0xc9}, &(0x7f0000000080)={0x1f, 0x1, 0xffff, 0x5, 0x4, 0x1, 0x4, 0x2}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:43 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x10000, 0x80000001, 0x401, 0x80000000, 0x19, "ff1f802c215a8f01d30ab61fbbb913ef83e372"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xd00, 0x0, 0x0}) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xb, 0x0, 0x0}) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xe00, 0x0, 0x0}) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000000)={0x1, 0x400}) 00:04:43 executing program 4: syz_open_dev$dmmidi(&(0x7f00000001c0), 0x3, 0x4000) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x4, 0xff, 0x3, 0x7, 0x1000}, &(0x7f0000000040)={0x9, 0x4a, 0x2, 0x6d4, 0x0, 0x1, 0x8, 0xc9}, &(0x7f0000000080)={0x1f, 0x1, 0xffff, 0x5, 0x4, 0x1, 0x4, 0x2}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xc, 0x0, 0x0}) 00:04:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x401, r0, 0x1}) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async, rerun: 32) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r3, 0x4b33, 0x0) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x10000, 0x80000001, 0x401, 0x80000000, 0x19, "ff1f802c215a8f01d30ab61fbbb913ef83e372"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (rerun: 64) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1100, 0x0, 0x0}) 00:04:43 executing program 4: syz_open_dev$dmmidi(&(0x7f00000001c0), 0x3, 0x4000) (async) pselect6(0x40, &(0x7f0000000000)={0x7, 0x8, 0x4, 0xff, 0x3, 0x7, 0x1000}, &(0x7f0000000040)={0x9, 0x4a, 0x2, 0x6d4, 0x0, 0x1, 0x8, 0xc9}, &(0x7f0000000080)={0x1f, 0x1, 0xffff, 0x5, 0x4, 0x1, 0x4, 0x2}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xd, 0x0, 0x0}) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x202801, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x17, 0xe, 0x186, &(0x7f0000000040)}) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1200, 0x0, 0x0}) 00:04:43 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) 00:04:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x301, 0x9, 0xffff8001, 0x7, 0x2, "7700000000bfb5df4900d39c00"}) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xe, 0x0, 0x0}) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x202801, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x17, 0xe, 0x186, &(0x7f0000000040)}) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:43 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) 00:04:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) (async) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x301, 0x9, 0xffff8001, 0x7, 0x2, "7700000000bfb5df4900d39c00"}) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1800, 0x0, 0x0}) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x202801, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x17, 0xe, 0x186, &(0x7f0000000040)}) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:43 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x10, 0x0, 0x0}) 00:04:43 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x301, 0x9, 0xffff8001, 0x7, 0x2, "7700000000bfb5df4900d39c00"}) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x301, 0x9, 0xffff8001, 0x7, 0x2, "7700000000bfb5df4900d39c00"}) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2500, 0x0, 0x0}) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x210800, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:43 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x11, 0x0, 0x0}) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5c00, 0x0, 0x0}) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0xff, r0, 0x1}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000240)={0xfff, 0xf9, 0x4, 0x80, 0x4, "582397ffc077b71c03b927c17a386e04c7c35d"}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/smsmdtv', 0x121040, 0x0) r4 = syz_io_uring_setup(0x10f5, &(0x7f0000000100)={0x0, 0x2438, 0x80, 0x0, 0x231, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000200), 0x1) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000280)) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x210800, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0}) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x12, 0x0, 0x0}) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) 00:04:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x80, 0x0) (rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0xff, r0, 0x1}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000240)={0xfff, 0xf9, 0x4, 0x80, 0x4, "582397ffc077b71c03b927c17a386e04c7c35d"}) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async, rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/smsmdtv', 0x121040, 0x0) r4 = syz_io_uring_setup(0x10f5, &(0x7f0000000100)={0x0, 0x2438, 0x80, 0x0, 0x231, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000200), 0x1) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000280)) 00:04:43 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0) (async) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x210800, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x210800, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2000000, 0x0, 0x0}) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x18, 0x0, 0x0}) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:43 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010062, 0x0, 0x0) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x25, 0x0, 0x0}) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x3000000, 0x0, 0x0}) 00:04:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000004c0)={0x100000001, r1, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000640)={0x7, r1, 0x2}) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x100, 0x492, "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", 0x5, 0x81, 0x3f, 0x20, 0xff, 0x80, 0x81, 0x1}, r4}}, 0x120) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000440)={0x0, 0x0, 0x6, 0x7fd, 0xfe, "7aa717ac4bfe07814f55a2f05f699879db716c", 0x4, 0x1}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0xd2, 0xe, &(0x7f0000000000)="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"}) 00:04:43 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x24) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5c, 0x0, 0x0}) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x4000000, 0x0, 0x0}) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x80, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0xff, r0, 0x1}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000240)={0xfff, 0xf9, 0x4, 0x80, 0x4, "582397ffc077b71c03b927c17a386e04c7c35d"}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/smsmdtv', 0x121040, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/smsmdtv', 0x121040, 0x0) r4 = syz_io_uring_setup(0x10f5, &(0x7f0000000100)={0x0, 0x2438, 0x80, 0x0, 0x231, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000200), 0x1) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000280)) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000280)) 00:04:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000004c0)={0x100000001, r1, 0x1}) (async, rerun: 64) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000640)={0x7, r1, 0x2}) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x100, 0x492, "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", 0x5, 0x81, 0x3f, 0x20, 0xff, 0x80, 0x81, 0x1}, r4}}, 0x120) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000440)={0x0, 0x0, 0x6, 0x7fd, 0xfe, "7aa717ac4bfe07814f55a2f05f699879db716c", 0x4, 0x1}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0xd2, 0xe, &(0x7f0000000000)="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"}) 00:04:43 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x24) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5000000, 0x0, 0x0}) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x300, 0x0, 0x0}) 00:04:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000004c0)={0x100000001, r1, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000640)={0x7, r1, 0x2}) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x100, 0x492, "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", 0x5, 0x81, 0x3f, 0x20, 0xff, 0x80, 0x81, 0x1}, r4}}, 0x120) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000440)={0x0, 0x0, 0x6, 0x7fd, 0xfe, "7aa717ac4bfe07814f55a2f05f699879db716c", 0x4, 0x1}) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0xd2, 0xe, &(0x7f0000000000)="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"}) 00:04:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x6000000, 0x0, 0x0}) 00:04:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x500, 0x0, 0x0}) 00:04:43 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x24) 00:04:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0xfc62252d, 0x9, 0x177e, 0x1, "7b7b19540322dbc6a88699caeb89460e1ab216", 0x67fad0bd, 0x8}) 00:04:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x7000000, 0x0, 0x0}) 00:04:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="02004000fddbdf25010014000300000008001900000000000a004e2400000001fc020000000000000000000000000001adfcffff0a004e2200000005fe800000000000000000000000000033010000000000000000000000c77c882c879da6bab6150d2a6e6b2e81ad665f2b8f4911b15d58071600382cbbba655867c7f5be4d7eba2c5d0ec47c1de056b9b9b41414f1f721c64af4248fbee226854cb3e5391fbe1bf6869664eaf7689134a4f7b20fd25a7bccca46b290c19a8e6f0c2e9c724eb9ac159056a6b09c60277fcbc49cf8cb2c341774b6e5ad5184dc53ca90f47e681dffc3eb48932b6b77b63d4158e89a7eedd33f076ac9f407382524c995ba983c2585b84c60e4f7772e2cce1e85"], 0x58}}, 0x8000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x50}, 0x1, 0x0, 0x0, 0x34000}, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r4, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000140)=""/231, &(0x7f0000000240)=0xe7) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000440)=0x9) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x40800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 00:04:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0xfc62252d, 0x9, 0x177e, 0x1, "7b7b19540322dbc6a88699caeb89460e1ab216", 0x67fad0bd, 0x8}) (rerun: 32) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x600, 0x0, 0x0}) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0}) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x58}}, 0x8000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x50}, 0x1, 0x0, 0x0, 0x34000}, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x3, 0x6) (rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r4, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) (async) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000140)=""/231, &(0x7f0000000240)=0xe7) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000440)=0x9) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:44 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xffff, 0x430080) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x9, 0x2810, 0x5e, &(0x7f0000000040)="badc229524a1c393412d41485bfbeb749c98f49ec8ef267929bb9c0cfbee9df443eaac39f90b4389a3db464402fe8600d81a89e0407c78d2e25803c7f757f64d67ce797c1b69da969330b867283427425ea4d4ea0d53a43521f73a33431f"}], 0x1}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x40800) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 00:04:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0xfc62252d, 0x9, 0x177e, 0x1, "7b7b19540322dbc6a88699caeb89460e1ab216", 0x67fad0bd, 0x8}) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x9000000, 0x0, 0x0}) 00:04:44 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xffff, 0x430080) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x9, 0x2810, 0x5e, &(0x7f0000000040)="badc229524a1c393412d41485bfbeb749c98f49ec8ef267929bb9c0cfbee9df443eaac39f90b4389a3db464402fe8600d81a89e0407c78d2e25803c7f757f64d67ce797c1b69da969330b867283427425ea4d4ea0d53a43521f73a33431f"}], 0x1}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x700, 0x0, 0x0}) 00:04:44 executing program 1: ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000180)='/dev/ttyprintk\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r0, 0x10, 0x0, @in6={0xa, 0x4e24, 0x80, @remote, 0x80}}}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0c0, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000001c0)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xa000000, 0x0, 0x0}) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x58}}, 0x8000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x50}, 0x1, 0x0, 0x0, 0x34000}, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r4, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x0) accept4$inet(r3, 0x0, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000140)=""/231, &(0x7f0000000240)=0xe7) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000440)=0x9) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:44 executing program 0: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xffff, 0x430080) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x9, 0x2810, 0x5e, &(0x7f0000000040)="badc229524a1c393412d41485bfbeb749c98f49ec8ef267929bb9c0cfbee9df443eaac39f90b4389a3db464402fe8600d81a89e0407c78d2e25803c7f757f64d67ce797c1b69da969330b867283427425ea4d4ea0d53a43521f73a33431f"}], 0x1}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x900, 0x0, 0x0}) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xb000000, 0x0, 0x0}) 00:04:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x40800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x40800) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) 00:04:44 executing program 1: ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000180)='/dev/ttyprintk\x00') (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000180)='/dev/ttyprintk\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r0, 0x10, 0x0, @in6={0xa, 0x4e24, 0x80, @remote, 0x80}}}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0c0, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000001c0)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xa00, 0x0, 0x0}) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xa10, 0x0, 0x0}) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xc000000, 0x0, 0x0}) 00:04:44 executing program 1: ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000180)='/dev/ttyprintk\x00') (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r0, 0x10, 0x0, @in6={0xa, 0x4e24, 0x80, @remote, 0x80}}}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0c0, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000001c0)) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b32, 0x0) 00:04:44 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x80000000, 0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xb00, 0x0, 0x0}) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xd000000, 0x0, 0x0}) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xc00, 0x0, 0x0}) 00:04:44 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x80000000, 0x8) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xe000000, 0x0, 0x0}) 00:04:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xd00, 0x0, 0x0}) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:44 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x80000000, 0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x10000000, 0x0, 0x0}) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xe00, 0x0, 0x0}) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x6, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}]}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x100a, 0x0, 0x0}) 00:04:44 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xbea, r0, 0x80000}) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x1000, 0x8000000000000000, 0xaed, 0x3722d1ae, 0x4, 0x3]}, &(0x7f0000000080)=0x78) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x11000000, 0x0, 0x0}) 00:04:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x6, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}]}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) 00:04:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:44 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xbea, r0, 0x80000}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xbea, r0, 0x80000}) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x1000, 0x8000000000000000, 0xaed, 0x3722d1ae, 0x4, 0x3]}, &(0x7f0000000080)=0x78) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1100, 0x0, 0x0}) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x12000000, 0x0, 0x0}) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000540)={0x0, 0x6, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}], 0x4, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}]}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1200, 0x0, 0x0}) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDISABIO(r1, 0x4b37) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x18000000, 0x0, 0x0}) 00:04:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1800, 0x0, 0x0}) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDISABIO(r1, 0x4b37) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) 00:04:44 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xbea, r0, 0x80000}) (async) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x1000, 0x8000000000000000, 0xaed, 0x3722d1ae, 0x4, 0x3]}, &(0x7f0000000080)=0x78) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x25000000, 0x0, 0x0}) 00:04:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2500, 0x0, 0x0}) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xdfffffffffffffff) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5c000000, 0x0, 0x0}) 00:04:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x143000, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:44 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) recvfrom$rxrpc(r1, 0x0, 0x0, 0x40010173, 0x0, 0x0) 00:04:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xdfffffffffffffff) (async, rerun: 64) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) (rerun: 64) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) 00:04:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 00:04:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5c00, 0x0, 0x0}) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}) 00:04:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x143000, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xdfffffffffffffff) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) 00:04:45 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) recvfrom$rxrpc(r1, 0x0, 0x0, 0x40010173, 0x0, 0x0) 00:04:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x9e, ""/158}) 00:04:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xe0ffff, 0x0, 0x0}) 00:04:45 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) recvfrom$rxrpc(r1, 0x0, 0x0, 0x40010173, 0x0, 0x0) (async) recvfrom$rxrpc(r1, 0x0, 0x0, 0x40010173, 0x0, 0x0) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xffffff7f, 0x0, 0x0}) 00:04:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:45 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x143000, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0}) 00:04:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x9e, ""/158}) 00:04:45 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) 00:04:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2000000, 0x0, 0x0}) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:45 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) 00:04:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) 00:04:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x3000000, 0x0, 0x0}) 00:04:45 executing program 4: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0}) 00:04:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x9e, ""/158}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x9e, ""/158}) (async) 00:04:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:46 executing program 4: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000002040)={0x3, 0x0, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/53, &(0x7f0000001040)=""/4096, 0x6000}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x24140, 0x0) 00:04:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x4000000, 0x0, 0x0}) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0}) 00:04:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) 00:04:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5000000, 0x0, 0x0}) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0}) 00:04:46 executing program 4: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000002040)={0x3, 0x0, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/53, &(0x7f0000001040)=""/4096, 0x6000}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x24140, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x24140, 0x0) (async) 00:04:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) 00:04:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_pts(0xffffffffffffffff, 0x204441) 00:04:46 executing program 4: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000002040)={0x3, 0x0, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=""/53, &(0x7f0000001040)=""/4096, 0x6000}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0}) 00:04:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x6000000, 0x0, 0x0}) 00:04:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) 00:04:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x24140, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x24140, 0x0) (async) 00:04:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async, rerun: 64) syz_open_pts(0xffffffffffffffff, 0x204441) (rerun: 64) 00:04:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x7000000, 0x0, 0x0}) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0}) 00:04:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e20, 0x3e0, @mcast2, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r1, 0x0, "be8852", "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"}}, 0x110) 00:04:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0}) 00:04:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0}) 00:04:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e20, 0x3e0, @mcast2, 0x4}}}, 0x38) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r1, 0x0, "be8852", "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"}}, 0x110) 00:04:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0}) 00:04:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) 00:04:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x9000000, 0x0, 0x0}) 00:04:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_pts(0xffffffffffffffff, 0x204441) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x204441) (async) 00:04:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e20, 0x3e0, @mcast2, 0x4}}}, 0x38) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r1, 0x0, "be8852", "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"}}, 0x110) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0}) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) 00:04:47 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b32, 0x0) 00:04:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffff8001, 0x0, 0x0, 0x6, 0x1b, "fb351db5f6bad90ffa54b6349aac3eec77e643"}) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xa000000, 0x0, 0x0}) 00:04:47 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x5, 0xfff, 0x1, 0x6, 0x596, 0x3a, 0xe8}, &(0x7f0000000040)={0xffff, 0x4, 0xfffffffffffffffc, 0x2, 0x4430000000000, 0x5, 0x0, 0x4}, &(0x7f0000000080)={0x5, 0x401, 0x35a400000000000, 0x5c, 0x17c, 0x7, 0x400, 0x3}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0}) 00:04:47 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x40, 0x40000000000, 0x0, 0x3}) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) syz_open_dev$admmidi(&(0x7f0000000100), 0x6, 0x2000) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000240)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5b, r0}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0xffff, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x88) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x24) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xb000000, 0x0, 0x0}) 00:04:47 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x5, 0xfff, 0x1, 0x6, 0x596, 0x3a, 0xe8}, &(0x7f0000000040)={0xffff, 0x4, 0xfffffffffffffffc, 0x2, 0x4430000000000, 0x5, 0x0, 0x4}, &(0x7f0000000080)={0x5, 0x401, 0x35a400000000000, 0x5c, 0x17c, 0x7, 0x400, 0x3}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffff8001, 0x0, 0x0, 0x6, 0x1b, "fb351db5f6bad90ffa54b6349aac3eec77e643"}) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xb, 0x0}) 00:04:47 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x40, 0x40000000000, 0x0, 0x3}) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) syz_open_dev$admmidi(&(0x7f0000000100), 0x6, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x40, 0x40000000000, 0x0, 0x3}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) (async) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) (async) syz_open_dev$admmidi(&(0x7f0000000100), 0x6, 0x2000) (async) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000240)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5b, r0}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0xffff, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x88) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x24) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) 00:04:47 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffffc, 0x5, 0xfff, 0x1, 0x6, 0x596, 0x3a, 0xe8}, &(0x7f0000000040)={0xffff, 0x4, 0xfffffffffffffffc, 0x2, 0x4430000000000, 0x5, 0x0, 0x4}, &(0x7f0000000080)={0x5, 0x401, 0x35a400000000000, 0x5c, 0x17c, 0x7, 0x400, 0x3}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xc000000, 0x0, 0x0}) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xc, 0x0}) 00:04:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0xffff8001, 0x0, 0x0, 0x6, 0x1b, "fb351db5f6bad90ffa54b6349aac3eec77e643"}) 00:04:47 executing program 1: ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x40, 0x40000000000, 0x0, 0x3}) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) syz_open_dev$admmidi(&(0x7f0000000100), 0x6, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x40, 0x40000000000, 0x0, 0x3}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) (async) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) (async) syz_open_dev$admmidi(&(0x7f0000000100), 0x6, 0x2000) (async) 00:04:47 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000140, 0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80400) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) memfd_create(&(0x7f0000000000)='%)\x00', 0x7) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xd000000, 0x0, 0x0}) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000240)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5b, r0}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0xffff, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0xffff, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x88) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x24) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) 00:04:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xd, 0x0}) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xe000000, 0x0, 0x0}) 00:04:47 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000140, 0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80400) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) memfd_create(&(0x7f0000000000)='%)\x00', 0x7) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000140, 0x0, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80400) (async) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) (async) memfd_create(&(0x7f0000000000)='%)\x00', 0x7) (async) 00:04:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0}) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x10000000, 0x0, 0x0}) 00:04:47 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40000140, 0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80400) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (rerun: 32) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) (async) memfd_create(&(0x7f0000000000)='%)\x00', 0x7) 00:04:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) 00:04:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x10, 0x0}) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x100a0000, 0x0, 0x0}) 00:04:47 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200040c5}, 0x5) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x1, 0x6f}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:47 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$inet(0x2, 0x1, 0x2006) accept4$inet(r1, 0x0, 0x0, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000100)=0x10001) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) 00:04:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x11, 0x0}) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x11000000, 0x0, 0x0}) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000000)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 00:04:47 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200040c5}, 0x5) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x1, 0x6f}) (async, rerun: 64) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) (rerun: 64) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x12, 0x0}) 00:04:47 executing program 4: socket$inet(0x2, 0x3, 0x6) (async) r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$inet(0x2, 0x1, 0x2006) accept4$inet(r1, 0x0, 0x0, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000100)=0x10001) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x12000000, 0x0, 0x0}) 00:04:47 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200040c5}, 0x5) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x1, 0x6f}) (async) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x1, 0x6f}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(r0, 0x2) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x18000000, 0x0, 0x0}) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x18, 0x0}) 00:04:47 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) 00:04:47 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) (async) r1 = socket$inet(0x2, 0x1, 0x2006) accept4$inet(r1, 0x0, 0x0, 0x0) (async) accept4$inet(r1, 0x0, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000100)=0x10001) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x25, 0x0}) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 64) syz_open_pts(r0, 0x2) (rerun: 64) 00:04:47 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) (async) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x25000000, 0x0, 0x0}) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5c, 0x0}) 00:04:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:47 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) recvfrom$rxrpc(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) 00:04:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) syz_open_pts(r0, 0x2) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x300, 0x0}) 00:04:47 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) 00:04:47 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r2}) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x5c000000, 0x0, 0x0}) 00:04:47 executing program 1: clock_gettime(0x6, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b37) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:47 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) recvfrom$rxrpc(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x500, 0x0}) 00:04:47 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async, rerun: 32) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r2}) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) 00:04:47 executing program 1: clock_gettime(0x6, &(0x7f0000000000)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b37) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xffffe000, 0x0, 0x0}) 00:04:47 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) recvfrom$rxrpc(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x600, 0x0}) 00:04:48 executing program 1: clock_gettime(0x6, &(0x7f0000000000)) (async, rerun: 32) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDDISABIO(r0, 0x4b37) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) 00:04:48 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x8001, 0x9, 0x7, 0x5, 0x2, "692d0ff41678877c1850baf900f08081dbea50", 0x0, 0x7ff}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b33, 0x0) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0xffffff7f, 0x0, 0x0}) 00:04:48 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2de15de8a23cdc40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x418, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000880)={{0x80000000, r1, 0x2, [0xfffffffc, 0x5e]}, {0x80000000, 0x0, 0x45d693631f17c1ba, [0x1, 0x9]}, 0x1, [0xb48e, 0x2]}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4bcd, @loopback, 0x10000}}, 0x24) write$midi(0xffffffffffffffff, &(0x7f0000000000)="cc2111e44fe04ef46ccf0117611aa502484e6664e6c813d67c868e323bae95f67753dfc60d3f5e0b889e604831c6545c33f487ee8cf58acff17a84698923bf656f9c02e49cd5f426ad81e54aa8840ae92ef892847db2340a461299e70bb78c08c88f47ba8164a7f66e481f2483773fba892047f4a4c4bda6aa687e0c746be24e464d93999770ba016813e5b7f49e33f4b2655ce593b1d107e7e316eadd3fa6457d9f0d4d375b11cca34249924595e29a74bbd2e89bb6e83f51", 0xb9) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:48 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r2}) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x700, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x9, r0, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x40, 0x40, 0x5, 0x6, 0x0, "df8e28038e4074592dbd71c77d79e19f6d9a36"}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb', 0x22600, 0x33) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) 00:04:48 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2de15de8a23cdc40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x418, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000880)={{0x80000000, r1, 0x2, [0xfffffffc, 0x5e]}, {0x80000000, 0x0, 0x45d693631f17c1ba, [0x1, 0x9]}, 0x1, [0xb48e, 0x2]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000880)={{0x80000000, r1, 0x2, [0xfffffffc, 0x5e]}, {0x80000000, 0x0, 0x45d693631f17c1ba, [0x1, 0x9]}, 0x1, [0xb48e, 0x2]}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4bcd, @loopback, 0x10000}}, 0x24) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4bcd, @loopback, 0x10000}}, 0x24) write$midi(0xffffffffffffffff, &(0x7f0000000000)="cc2111e44fe04ef46ccf0117611aa502484e6664e6c813d67c868e323bae95f67753dfc60d3f5e0b889e604831c6545c33f487ee8cf58acff17a84698923bf656f9c02e49cd5f426ad81e54aa8840ae92ef892847db2340a461299e70bb78c08c88f47ba8164a7f66e481f2483773fba892047f4a4c4bda6aa687e0c746be24e464d93999770ba016813e5b7f49e33f4b2655ce593b1d107e7e316eadd3fa6457d9f0d4d375b11cca34249924595e29a74bbd2e89bb6e83f51", 0xb9) 00:04:48 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x8001, 0x9, 0x7, 0x5, 0x2, "692d0ff41678877c1850baf900f08081dbea50", 0x0, 0x7ff}) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b33, 0x0) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x900, 0x0}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x9, r0, 0x2}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x40, 0x40, 0x5, 0x6, 0x0, "df8e28038e4074592dbd71c77d79e19f6d9a36"}) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb', 0x22600, 0x33) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xd, 0x11, 0xca}) 00:04:48 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2de15de8a23cdc40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x418, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2de15de8a23cdc40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x418, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x6, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000880)={{0x80000000, r1, 0x2, [0xfffffffc, 0x5e]}, {0x80000000, 0x0, 0x45d693631f17c1ba, [0x1, 0x9]}, 0x1, [0xb48e, 0x2]}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4bcd, @loopback, 0x10000}}, 0x24) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4bcd, @loopback, 0x10000}}, 0x24) write$midi(0xffffffffffffffff, &(0x7f0000000000)="cc2111e44fe04ef46ccf0117611aa502484e6664e6c813d67c868e323bae95f67753dfc60d3f5e0b889e604831c6545c33f487ee8cf58acff17a84698923bf656f9c02e49cd5f426ad81e54aa8840ae92ef892847db2340a461299e70bb78c08c88f47ba8164a7f66e481f2483773fba892047f4a4c4bda6aa687e0c746be24e464d93999770ba016813e5b7f49e33f4b2655ce593b1d107e7e316eadd3fa6457d9f0d4d375b11cca34249924595e29a74bbd2e89bb6e83f51", 0xb9) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xa00, 0x0}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0}) 00:04:48 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x8001, 0x9, 0x7, 0x5, 0x2, "692d0ff41678877c1850baf900f08081dbea50", 0x0, 0x7ff}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x8001, 0x9, 0x7, 0x5, 0x2, "692d0ff41678877c1850baf900f08081dbea50", 0x0, 0x7ff}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b33, 0x0) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x9, r0, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x40, 0x40, 0x5, 0x6, 0x0, "df8e28038e4074592dbd71c77d79e19f6d9a36"}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb', 0x22600, 0x33) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xb00, 0x0}) 00:04:48 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x2, 0x5}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xd, 0x11, 0xca}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xd, 0x11, 0xca}) (async) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x40800, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x53, 0x40, 0x1, 0x4, 0xde, "79c08220efd8b93f059ab3f2baf0b279f42caa", 0x7, 0xdc}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0}) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x641, 0x5, "8d72fbb566ae313a586e4817d98161f59c7d85", 0x20, 0x81}) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xc00, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x40800, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x53, 0x40, 0x1, 0x4, 0xde, "79c08220efd8b93f059ab3f2baf0b279f42caa", 0x7, 0xdc}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x40800}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x53, 0x40, 0x1, 0x4, 0xde, "79c08220efd8b93f059ab3f2baf0b279f42caa", 0x7, 0xdc}) (async) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x641, 0x5, "8d72fbb566ae313a586e4817d98161f59c7d85", 0x20, 0x81}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0}) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0xd, 0x11, 0xca}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x40800, 0x0, 0xffffffffffffffff}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x53, 0x40, 0x1, 0x4, 0xde, "79c08220efd8b93f059ab3f2baf0b279f42caa", 0x7, 0xdc}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x53, 0x40, 0x1, 0x4, 0xde, "79c08220efd8b93f059ab3f2baf0b279f42caa", 0x7, 0xdc}) 00:04:48 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x2, 0x5}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x641, 0x5, "8d72fbb566ae313a586e4817d98161f59c7d85", 0x20, 0x81}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x641, 0x5, "8d72fbb566ae313a586e4817d98161f59c7d85", 0x20, 0x81}) (async) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xd00, 0x0}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_pts(r3, 0x8c780) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x2, 0x4, 0x200, 0x4, 0x2, "2342db039a46e0c5ef52b50a18a79abce28f73", 0x8, 0x7fff}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xe00, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0}) 00:04:48 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x2, 0x5}) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x2, 0x5}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_pts(r3, 0x8c780) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x2, 0x4, 0x200, 0x4, 0x2, "2342db039a46e0c5ef52b50a18a79abce28f73", 0x8, 0x7fff}) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) syz_open_pts(r2, 0x0) (async) syz_open_pts(r3, 0x8c780) (async) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x2, 0x4, 0x200, 0x4, 0x2, "2342db039a46e0c5ef52b50a18a79abce28f73", 0x8, 0x7fff}) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1100, 0x0}) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000480)=0x100000000) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xb, 0x4, 0x17e, &(0x7f0000000040)}) 00:04:48 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010041, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000040)=""/250, &(0x7f0000000140)=""/61, &(0x7f0000000180)=""/33, 0x4}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0}) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 64) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_pts(r3, 0x8c780) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x2, 0x4, 0x200, 0x4, 0x2, "2342db039a46e0c5ef52b50a18a79abce28f73", 0x8, 0x7fff}) (async, rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (rerun: 32) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1200, 0x0}) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000480)=0x100000000) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xb, 0x4, 0x17e, &(0x7f0000000040)}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xb, 0x0}) 00:04:48 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010041, 0x0, 0x0) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000040)=""/250, &(0x7f0000000140)=""/61, &(0x7f0000000180)=""/33, 0x4}) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1800, 0x0}) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) (async) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000480)=0x100000000) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xb, 0x4, 0x17e, &(0x7f0000000040)}) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xb, 0x4, 0x17e, &(0x7f0000000040)}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xc, 0x0}) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x2500, 0x0}) 00:04:48 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010041, 0x0, 0x0) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000040)=""/250, &(0x7f0000000140)=""/61, &(0x7f0000000180)=""/33, 0x4}) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xd, 0x0}) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc800, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000440)={0x34, 0xa, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800}) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000000c0)) (async) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) (async) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5c00, 0x0}) 00:04:48 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x21, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r2, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001000)={'NETMAP\x00'}, &(0x7f0000001040)=0x1e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1}, &(0x7f0000001080), &(0x7f00000010c0)='%+9llu \x00'}, 0x20) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 00:04:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 00:04:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc800, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000440)={0x34, 0xa, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc800, 0x0) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000440)={0x34, 0xa, &(0x7f0000000480)="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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0}) 00:04:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) (async) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 00:04:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 00:04:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc800, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000440)={0x34, 0xa, &(0x7f0000000480)="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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x10, 0x0}) 00:04:49 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x21, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r2, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001000)={'NETMAP\x00'}, &(0x7f0000001040)=0x1e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1}, &(0x7f0000001080), &(0x7f00000010c0)='%+9llu \x00'}, 0x20) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x11, 0x0}) 00:04:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) [ 289.136262][ C0] ------------[ cut here ]------------ 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x3000000, 0x0}) [ 289.137753][ C0] NETDEV WATCHDOG: sl0 (): transmit queue 0 timed out 40320 ms [ 289.139983][ C0] WARNING: CPU: 0 PID: 6127 at net/sched/sch_generic.c:526 dev_watchdog+0x63c/0x688 [ 289.142206][ C0] Modules linked in: 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x145, 0x16, &(0x7f0000000000)="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"}) [ 289.143109][ C0] CPU: 0 PID: 6127 Comm: syz-executor.5 Not tainted 6.7.0-rc6-syzkaller-gaafe7ad77b91 #0 [ 289.145432][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 289.147768][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 289.149694][ C0] pc : dev_watchdog+0x63c/0x688 [ 289.150922][ C0] lr : dev_watchdog+0x63c/0x688 [ 289.152028][ C0] sp : ffff800080007bb0 [ 289.153005][ C0] x29: ffff800080007be0 x28: dfff800000000000 x27: fffffffffffff810 [ 289.154822][ C0] x26: ffff0000d4645c00 x25: 0000000000000000 x24: 0000000000000110 [ 289.156592][ C0] x23: ffff0000d4645c70 x22: 0000000000009d80 x21: ffff0000ce72e000 [ 289.158556][ C0] x20: ffff0000ce72e000 x19: ffff0000ce72e548 x18: ffff800080007080 [ 289.160476][ C0] x17: 0000000000000000 x16: ffff80008a82b138 x15: 0000000000000001 [ 289.162436][ C0] x14: 1fffe0003682623a x13: 0000000000000000 x12: 0000000000000000 [ 289.164333][ C0] x11: 0000000000000103 x10: 0000000000ff0100 x9 : 850d671683ba1500 [ 289.166865][ C0] x8 : 850d671683ba1500 x7 : 0000000000000001 x6 : 0000000000000001 [ 289.168825][ C0] x5 : ffff800080007498 x4 : ffff80008e5d20c0 x3 : ffff8000805a9ecc [ 289.170792][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000000 [ 289.172609][ C0] Call trace: [ 289.172616][ C0] dev_watchdog+0x63c/0x688 [ 289.172634][ C0] call_timer_fn+0x19c/0x8cc [ 289.175630][ C0] __run_timers+0x55c/0x734 [ 289.176695][ C0] run_timer_softirq+0x7c/0x114 [ 289.177836][ C0] __do_softirq+0x2d8/0xce4 [ 289.179103][ C0] ____do_softirq+0x14/0x20 [ 289.180167][ C0] call_on_irq_stack+0x24/0x4c [ 289.181346][ C0] do_softirq_own_stack+0x20/0x2c [ 289.182572][ C0] __irq_exit_rcu+0x1d8/0x434 [ 289.183773][ C0] irq_exit_rcu+0x14/0x84 [ 289.183788][ C0] el1_interrupt+0x38/0x68 [ 289.183803][ C0] el1h_64_irq_handler+0x18/0x24 [ 289.183815][ C0] el1h_64_irq+0x64/0x68 [ 289.183824][ C0] lock_release+0x4f4/0x9ac [ 289.183834][ C0] rcu_lock_release+0x2c/0x40 [ 289.189967][ C0] ext4_get_group_info+0x2d0/0x390 [ 289.191224][ C0] ext4_mb_prefetch+0x130/0x34c [ 289.192257][ C0] ext4_mb_regular_allocator+0x83c/0x2fa8 [ 289.193609][ C0] ext4_mb_new_blocks+0xcac/0x445c [ 289.194838][ C0] ext4_ext_map_blocks+0x1728/0x5f94 [ 289.196153][ C0] ext4_map_blocks+0x810/0x1810 [ 289.197189][ C0] ext4_getblk+0x19c/0x770 [ 289.198217][ C0] ext4_bread+0x3c/0x1b0 [ 289.199241][ C0] ext4_append+0x260/0x4cc [ 289.200239][ C0] ext4_init_new_dir+0x294/0x8e4 [ 289.201369][ C0] ext4_mkdir+0x3d4/0xa64 [ 289.202424][ C0] vfs_mkdir+0x27c/0x3e4 [ 289.203402][ C0] do_mkdirat+0x248/0x574 [ 289.204467][ C0] __arm64_sys_mkdirat+0x90/0xa8 [ 289.205607][ C0] invoke_syscall+0x98/0x2b8 [ 289.206813][ C0] el0_svc_common+0x130/0x23c [ 289.207857][ C0] do_el0_svc+0x48/0x58 [ 289.208916][ C0] el0_svc+0x54/0x158 [ 289.209886][ C0] el0t_64_sync_handler+0x84/0xfc [ 289.211105][ C0] el0t_64_sync+0x190/0x194 [ 289.212193][ C0] irq event stamp: 10756493 [ 289.213250][ C0] hardirqs last enabled at (10756492): [] console_unlock+0x17c/0x3d4 [ 289.215589][ C0] hardirqs last disabled at (10756493): [] el1_dbg+0x24/0x80 [ 289.217709][ C0] softirqs last enabled at (10755698): [] __do_softirq+0xac8/0xce4 [ 289.219898][ C0] softirqs last disabled at (10756445): [] ____do_softirq+0x14/0x20 [ 289.222270][ C0] ---[ end trace 0000000000000000 ]--- [ 289.223750][ C0] sl0: transmit timed out, driver error? 00:04:49 executing program 1: ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, r1, 0x80000}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:49 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2000000000005, r3, 0x1}) syz_open_pts(r1, 0x30800) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x145, 0x16, &(0x7f0000000000)="5c7f29d8fdad85c434addf7cd75d8651fac8bc22d539590bf8365cbfb08507da847258b46471aeb916dfd529cb8ce1a770261f2c9514714be9f78c8682a99adf9aa5667e58268ff835d447e77fb0497c5298c7eff25aeb1aff6f1a5d6b7d8413a6df060c59bff0b566c5514dffd5da4cbe85fdbbfef1919829e795d765fc4709e72dddd950bdc87017578792212e3c26b686405ba61b5708bfaabbf0caf97b1ec0420ac3caeb752e72a1c9dc2d05179582e920558dac3dfe11f0950aa41a9a606432bdb9892008296151315d4ce363ed708bb855b933358ab743808f148ed8c872688f4f6e80fb7fcecb5303db2c85fa1c5f67048352616a9881f6ba86d4ea3943bb42359eb51b7cede553d76f306c3ff7627036d27a1e8c01760e28fbb5a4bf359b21fb8d782d52b2deeb89bf7f1f345e7ae928e41a2be9ef1a158a43d1cc8d643b2263afe6345adcdf2fc58ac042f5a146c0739296b793b25c4b26e13374552a824d737df9e9ad081586a6d204118afb9bbbca62344f6c8413439935e190b5a4bb65fe5a6cf638329679249257c812e14746217c1597779ec84019c2d7ae458eb7223ac9e11fc10a6d2fa551f928d4ee1e565850bde69aefa3542e899814d3787e2f1b8f0b3cee4535a1577ac6b132bfe13841685175a1416effa5eeb0b53404187cf53e55a88bc0183f92f2a23ac331c7c8653b302d000d12b7726344e7fc31dba72b37cf3831600174eb1e42c499eab525eb3c623e207fd8afb57cd26c026ec92c5f10803eae13077e530cf75032ec81ac2b580a3f64275c5fe697843c0c16ed880893d1b174968d2a9060c4e186b2826498f1bc7addb2fb2bd09a8f5c9f74ca1fbe20175aec4192d9228467856f1de6a523acd704e2e465d4372cdadf95fc5350203b11ed654b593d0e26168800dcc4e7fb12cbb7df2fbe1cfcce2c3662b848c59e470b0dcd4ce5afbfca0c5400de56a61595b4fc1f3125cb9a22d60dceb4f42baf1740724c5f41f1540364e4d359763a2d0c21a465d6db0d0654c1cf995f9dba89fe31c18df9c80120d32ad66bba44742211965e68357c090a8c6ec0fb053c8a9251b15ea0a1d7efe4787bd96ae5523134e875cd4921f60b1805b8a228cca76faf0b448ba072b036fc99e0bfdd8e271fe592250bf6f1949692e2e4c0c29a7cd11bac548a0d307b603b121d7f586c7ef20c5af43c49f68d48b1654bfd2541f4b8024e0c3967c206d29a0107ce5401e400f2383fa45c634fbad4d72827ba0a3fe1329bda29b7c1cfef94b64c0e3d0fe67c343a66fadd7f61e381e0f2a4ed3cff2796e1472693bf5f84a6bc1021d8a979bb5734fe9fc02a970c91f33e617e832bc9240e7f620434b8cb9e9f3360086970bf8ee366acf660a3db26359419898ebf74949a035ad6fb50009f5e1cd4b1e0a5be379e96a860553ae2c4f7817065"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x145, 0x16, &(0x7f0000000000)="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"}) (async) 00:04:49 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x21, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r2, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r3, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001000)={'NETMAP\x00'}, &(0x7f0000001040)=0x1e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1}, &(0x7f0000001080), &(0x7f00000010c0)='%+9llu \x00'}, 0x20) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x21, 0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x6) (async) accept4$inet(r1, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x6) (async) accept4$inet(r2, 0x0, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) socket$inet(0x2, 0x3, 0x6) (async) accept4$inet(r3, 0x0, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001000)={'NETMAP\x00'}, &(0x7f0000001040)=0x1e) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{0x1}, &(0x7f0000001080), &(0x7f00000010c0)='%+9llu \x00'}, 0x20) (async) 00:04:49 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2000000000005, r3, 0x1}) syz_open_pts(r1, 0x30800) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2000000000005, r3, 0x1}) (async) syz_open_pts(r1, 0x30800) (async) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) (async) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0}) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x12, 0x0}) 00:04:49 executing program 1: ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, r1, 0x80000}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5000000, 0x0}) 00:04:49 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0xc5, [0xffffffffffffffff, 0xb0, 0x9, 0x1a, 0x80, 0x81], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/197}, &(0x7f00000001c0)=0x78) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000200)={0x10000, 0x3d, "955a3b0b7eed938f6879e2109df9e9229130276908b1a78d023e7b5e7763215f94e5eb2bf513a2f146ca1486f346e32414041826318a07eefe70cfbbc6"}) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x6000000, 0x0}) 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x145, 0x16, &(0x7f0000000000)="5c7f29d8fdad85c434addf7cd75d8651fac8bc22d539590bf8365cbfb08507da847258b46471aeb916dfd529cb8ce1a770261f2c9514714be9f78c8682a99adf9aa5667e58268ff835d447e77fb0497c5298c7eff25aeb1aff6f1a5d6b7d8413a6df060c59bff0b566c5514dffd5da4cbe85fdbbfef1919829e795d765fc4709e72dddd950bdc87017578792212e3c26b686405ba61b5708bfaabbf0caf97b1ec0420ac3caeb752e72a1c9dc2d05179582e920558dac3dfe11f0950aa41a9a606432bdb9892008296151315d4ce363ed708bb855b933358ab743808f148ed8c872688f4f6e80fb7fcecb5303db2c85fa1c5f67048352616a9881f6ba86d4ea3943bb42359eb51b7cede553d76f306c3ff7627036d27a1e8c01760e28fbb5a4bf359b21fb8d782d52b2deeb89bf7f1f345e7ae928e41a2be9ef1a158a43d1cc8d643b2263afe6345adcdf2fc58ac042f5a146c0739296b793b25c4b26e13374552a824d737df9e9ad081586a6d204118afb9bbbca62344f6c8413439935e190b5a4bb65fe5a6cf638329679249257c812e14746217c1597779ec84019c2d7ae458eb7223ac9e11fc10a6d2fa551f928d4ee1e565850bde69aefa3542e899814d3787e2f1b8f0b3cee4535a1577ac6b132bfe13841685175a1416effa5eeb0b53404187cf53e55a88bc0183f92f2a23ac331c7c8653b302d000d12b7726344e7fc31dba72b37cf3831600174eb1e42c499eab525eb3c623e207fd8afb57cd26c026ec92c5f10803eae13077e530cf75032ec81ac2b580a3f64275c5fe697843c0c16ed880893d1b174968d2a9060c4e186b2826498f1bc7addb2fb2bd09a8f5c9f74ca1fbe20175aec4192d9228467856f1de6a523acd704e2e465d4372cdadf95fc5350203b11ed654b593d0e26168800dcc4e7fb12cbb7df2fbe1cfcce2c3662b848c59e470b0dcd4ce5afbfca0c5400de56a61595b4fc1f3125cb9a22d60dceb4f42baf1740724c5f41f1540364e4d359763a2d0c21a465d6db0d0654c1cf995f9dba89fe31c18df9c80120d32ad66bba44742211965e68357c090a8c6ec0fb053c8a9251b15ea0a1d7efe4787bd96ae5523134e875cd4921f60b1805b8a228cca76faf0b448ba072b036fc99e0bfdd8e271fe592250bf6f1949692e2e4c0c29a7cd11bac548a0d307b603b121d7f586c7ef20c5af43c49f68d48b1654bfd2541f4b8024e0c3967c206d29a0107ce5401e400f2383fa45c634fbad4d72827ba0a3fe1329bda29b7c1cfef94b64c0e3d0fe67c343a66fadd7f61e381e0f2a4ed3cff2796e1472693bf5f84a6bc1021d8a979bb5734fe9fc02a970c91f33e617e832bc9240e7f620434b8cb9e9f3360086970bf8ee366acf660a3db26359419898ebf74949a035ad6fb50009f5e1cd4b1e0a5be379e96a860553ae2c4f7817065"}) (async) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0x145, 0x16, &(0x7f0000000000)="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"}) 00:04:49 executing program 1: ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, r1, 0x80000}) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, r1, 0x80000}) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) 00:04:49 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0xc5, [0xffffffffffffffff, 0xb0, 0x9, 0x1a, 0x80, 0x81], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/197}, &(0x7f00000001c0)=0x78) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000200)={0x10000, 0x3d, "955a3b0b7eed938f6879e2109df9e9229130276908b1a78d023e7b5e7763215f94e5eb2bf513a2f146ca1486f346e32414041826318a07eefe70cfbbc6"}) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x18, 0x0}) 00:04:49 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2000000000005, r3, 0x1}) syz_open_pts(r1, 0x30800) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) (async) ioctl$KDFONTOP_GET(r4, 0x4b3a, 0x0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) (async) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x3, 0x8, 0x400, 0x3, 0x1b, "b68619f359252b98ee0f06ecdb916aaaf14445"}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000000)) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x7000000, 0x0}) 00:04:49 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = syz_open_pts(r2, 0xd00) ioctl$KDFONTOP_GET(r3, 0x4b3a, 0x0) 00:04:49 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spi_bcm2835aux', 0x191000, 0xc2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)=0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) 00:04:49 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0xc5, [0xffffffffffffffff, 0xb0, 0x9, 0x1a, 0x80, 0x81], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/197}, &(0x7f00000001c0)=0x78) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000200)={0x10000, 0x3d, "955a3b0b7eed938f6879e2109df9e9229130276908b1a78d023e7b5e7763215f94e5eb2bf513a2f146ca1486f346e32414041826318a07eefe70cfbbc6"}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0xc5, [0xffffffffffffffff, 0xb0, 0x9, 0x1a, 0x80, 0x81], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/197}, &(0x7f00000001c0)=0x78) (async) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000200)={0x10000, 0x3d, "955a3b0b7eed938f6879e2109df9e9229130276908b1a78d023e7b5e7763215f94e5eb2bf513a2f146ca1486f346e32414041826318a07eefe70cfbbc6"}) (async) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x25, 0x0}) 00:04:49 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spi_bcm2835aux', 0x191000, 0xc2) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spi_bcm2835aux', 0x191000, 0xc2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)=0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x3, 0x8, 0x400, 0x3, 0x1b, "b68619f359252b98ee0f06ecdb916aaaf14445"}) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000000)) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0}) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5c, 0x0}) 00:04:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe88}}}, 0x118) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$I2C_PEC(r2, 0x708, 0x1) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:49 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = syz_open_pts(r2, 0xd00) ioctl$KDFONTOP_GET(r3, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000)) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) syz_open_pts(r2, 0xd00) (async) ioctl$KDFONTOP_GET(r3, 0x4b3a, 0x0) (async) 00:04:49 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/spi_bcm2835aux', 0x191000, 0xc2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)=0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x3, 0x8, 0x400, 0x3, 0x1b, "b68619f359252b98ee0f06ecdb916aaaf14445"}) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000000)) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x9000000, 0x0}) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x300, 0x0}) 00:04:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe88}}}, 0x118) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$I2C_PEC(r2, 0x708, 0x1) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 00:04:49 executing program 0: ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xa000000, 0x0}) 00:04:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe88}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe88}}}, 0x118) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$I2C_PEC(r2, 0x708, 0x1) (async) ioctl$I2C_PEC(r2, 0x708, 0x1) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x500, 0x0}) 00:04:49 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0xffffff8f) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x600, 0x0}) 00:04:49 executing program 0: ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) 00:04:49 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000000)) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r3 = syz_open_pts(r2, 0xd00) ioctl$KDFONTOP_GET(r3, 0x4b3a, 0x0) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xb000000, 0x0}) 00:04:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 00:04:49 executing program 0: ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, 0x0) (async) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xc000000, 0x0}) 00:04:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x700, 0x0}) 00:04:49 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0xffffff8f) 00:04:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 00:04:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x807ab41cadd9a14, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xd000000, 0x0}) 00:04:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x9, 0x6100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x7, 0x2) ioctl$I2C_PEC(r2, 0x708, 0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) syz_open_pts(r3, 0x6240) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x807ab41cadd9a14, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:04:51 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0xffffff8f) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0xffffff8f) (async) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x900, 0x0}) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x4040) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xe000000, 0x0}) 00:04:51 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x4040) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xa00, 0x0}) 00:04:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x9, 0x6100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x7, 0x2) ioctl$I2C_PEC(r2, 0x708, 0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) syz_open_pts(r3, 0x6240) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0}) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x807ab41cadd9a14, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x4040) 00:04:51 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) (async) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xa10, 0x0}) 00:04:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$dmmidi(&(0x7f0000000000), 0x9, 0x6100) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x9, 0x6100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x7, 0x2) ioctl$I2C_PEC(r2, 0x708, 0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) syz_open_pts(r3, 0x6240) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x11000000, 0x0}) 00:04:51 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x12000000, 0x0}) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xb00, 0x0}) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) 00:04:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3f) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:51 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x24) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, r1, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xc00, 0x0}) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x18000000, 0x0}) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:04:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3f) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:51 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x24) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, r1, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x24) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, r1, 0x0, 0x0], 0x4, 0x80000}) (async) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) (async) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xffff8001, 0x2, 0x8, 0x8, 0x1a, "160007000054ab475e00"}) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xd00, 0x0}) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x25000000, 0x0}) 00:04:51 executing program 4: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x24) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, r1, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDISABIO(r1, 0x4b37) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xffff8001, 0x2, 0x8, 0x8, 0x1a, "160007000054ab475e00"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xffff8001, 0x2, 0x8, 0x8, 0x1a, "160007000054ab475e00"}) (async) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xe00, 0x0}) 00:04:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3f) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5c000000, 0x0}) 00:04:51 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) syz_open_pts(r1, 0xa80) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x700) ioctl$KDDISABIO(r2, 0x4b37) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x100a, 0x0}) 00:04:51 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) syz_open_pts(r1, 0xa80) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async, rerun: 32) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async, rerun: 32) r2 = syz_open_pts(r0, 0x700) ioctl$KDDISABIO(r2, 0x4b37) 00:04:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x1000, ""/4096}) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xffff8001, 0x2, 0x8, 0x8, 0x1a, "160007000054ab475e00"}) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1100, 0x0}) 00:04:51 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1200, 0x0}) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x4, 0x4, 0x129}) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x1000, ""/4096}) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1800, 0x0}) 00:04:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x4040) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xffffff7f, 0x0}) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) syz_open_pts(r1, 0xa80) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x700) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$KDDISABIO(r2, 0x4b37) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x4, 0x4, 0x129}) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x2500, 0x0}) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000001280)=0x100, 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001240)={0x5, 0x7, 0x3, 0x5ba0, 0x4, "881e0af677c70c8b67eb3ccb204aa82d790909", 0x6, 0x2}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001200)={0x0, 0x1, &(0x7f00000000c0)=""/159, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=""/124, 0x2}) 00:04:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x4040) 00:04:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x4, 0x4, 0x129}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:04:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x1000, ""/4096}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000000)={0x0, 0x1000, ""/4096}) (async) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5c00, 0x0}) 00:04:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0x4040) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:52 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x22040, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xe0ffff, 0x0}) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:52 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x2}) (async) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000001280)=0x100, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000001280)=0x100, 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001240)={0x5, 0x7, 0x3, 0x5ba0, 0x4, "881e0af677c70c8b67eb3ccb204aa82d790909", 0x6, 0x2}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001200)={0x0, 0x1, &(0x7f00000000c0)=""/159, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=""/124, 0x2}) 00:04:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(0xffffffffffffffff, 0x4040) 00:04:52 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async, rerun: 32) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x22040, 0x0) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x30, "5309339745751765c64ea28e51ad5bc9bf7ea77f688db0997e17aa425fcb8cf66c830bb6da342305ec2a8896cf76f18e"}, &(0x7f0000000080)=0x54) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:52 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 00:04:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(0xffffffffffffffff, 0x4040) 00:04:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x2}) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000001280)=0x100, 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001240)={0x5, 0x7, 0x3, 0x5ba0, 0x4, "881e0af677c70c8b67eb3ccb204aa82d790909", 0x6, 0x2}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001200)={0x0, 0x1, &(0x7f00000000c0)=""/159, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=""/124, 0x2}) 00:04:52 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x22040, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b33, 0x0) 00:04:52 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) syz_open_pts(0xffffffffffffffff, 0x4040) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 00:04:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x30, "5309339745751765c64ea28e51ad5bc9bf7ea77f688db0997e17aa425fcb8cf66c830bb6da342305ec2a8896cf76f18e"}, &(0x7f0000000080)=0x54) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:52 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4040) 00:04:52 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) 00:04:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x30, "5309339745751765c64ea28e51ad5bc9bf7ea77f688db0997e17aa425fcb8cf66c830bb6da342305ec2a8896cf76f18e"}, &(0x7f0000000080)=0x54) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x3000000, 0x0}) 00:04:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1d, 0x2, 0x4a}) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) 00:04:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4040) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0}) 00:04:52 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1d, 0x2, 0x4a}) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002900), 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"f036ba51d717de18dad8d42519d72001"}}}}, 0x90) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) 00:04:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(0xffffffffffffffff, 0x4040) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5000000, 0x0}) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1d, 0x2, 0x4a}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1d, 0x2, 0x4a}) (async) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(0xffffffffffffffff, 0x4040) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x6000000, 0x0}) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x7000000, 0x0}) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 00:04:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(0xffffffffffffffff, 0x4040) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) 00:04:52 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) socket$inet(0x2, 0x3, 0x6) (async) r3 = socket$inet(0x2, 0x3, 0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0}) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) 00:04:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x0) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x9000000, 0x0}) 00:04:52 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) r3 = socket$inet(0x2, 0x3, 0x6) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) (async) accept4$inet(r3, 0x0, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) (async) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xa000000, 0x0}) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7e3001, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 5: ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0x8) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000040)) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x9, 0xe, &(0x7f0000000000)="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"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000440)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:52 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xb000000, 0x0}) 00:04:52 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x10000, 0xffff, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x1c, 0xacc53733367a9854, [{0x6, 0x5, "f42aba"}, {0x7, 0x11, "c78889dde5e1b0db669338ccbb0c98"}]}, @noop, @ssrr={0x89, 0x7, 0xde, [@local]}, @generic={0x89, 0xb, "b293163672f6678971"}]}}}}}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000080)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xe78, 0x80000001, 0xa5, 0x0, 0x1f, "cc6c505e0fea780065bca476a960f0f11a381d", 0x2, 0x9}) syz_open_dev$I2C(&(0x7f0000000040), 0xc314, 0x4080) 00:04:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xc000000, 0x0}) 00:04:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7e3001, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x9, 0xe, &(0x7f0000000000)="17d86266193ca54f19dab60f198e7c60d547ddf069128c9adcce560b361d99f714642daebc9d18bbe370de6e00498e660e36cbe7d35f29f79479d848f14cffb9293c91f0b62303bed4239ed953461b91372236385a748288ed2aa5c97f8a425e03055cda392c41030e8f7e4a28abac22bef7bd6aca27e81d4a937f4da2ac6e83e02750826cdd3be2c02a8522016cc26cbc7bbf79eb7fcb0ed7c8b4184c54ad5b74accb81d0f3db81f3f6e688b0167fc264c0e642384c4bc77efca36e317b43449d2e0ff76da0043b5293eed1e8238a275a59e7449a02b580976e52c13f411c22077daf4b625c001a81131f63178ada0ae716429d16c640efdaec2d892b8417d8d55fed1e1dae8c75e4cfd63371fa19e16bb1a973c95f70227c87d8b1b3b78a085867ca0c12036e8c45c5ad9600a3b0c9d42e69ce2ce53ad51b0184e82a0c0b415377f8943c50958694a153fd12c1030ea32877da68c3772fc0eb580095b445b0d93ffaa3e83d32f8929a762f3672679710338950793c73fe949268fa9717a9214f3044b55d121d046d5ad6aecce4643f5b31d6abada5441c5997e8de35f5a27a4ad0d2c3b581bcd4b79cc5c5ddaa427df0a84c0d5dc7f352627a803c0ddefff555e6a61245841591ed6748fc4278ac1745004f053789aec17b321efd3953d5cc02f7f1883461f090c1ead30f6668e3a6c520dc33c2285c989f429c2a04d6f11c6b4230692288c40fecf3bea8c40ea1f043283f22d75e486be699cdb169f1032570da51b06b589f893afe20576706fd91cefafa4e23a8abe7a84139df2a32f1b6e2f1a4c682c15014a51c479b354ee733cc32eaeb035280e362826226653ecb1be6058f90160d13900976fb718e12141bf7b62f64b574d80fc6e8a5ad4cd0697bfb3de146ee91f8566f73016943257eb7571a181814870ab17d45a3c8facb9e8d7bec228ccfb164183ff7713b255086da9c81082d38380aaaff5d664550200845824d8385399ecb01e1e1c5a8e7ba00beed135070392da160256db5eba9b1fc8d3e9583bbe2726b6feb0055206afcc09248c170dd08ff70c8597503206414c4575391a1ac269da9508e86ca4c41849856dd518569b66d4f430b8f61f02307533f1e521facc3dc9a9bffd46bb6d4f3195e7e571eebb220d937f88dc060988429050f7d455cab23c22cfac8a45169043cd9cd258fba8dc2b02b01d2a673204d26bd93ba50079a8fc864b338b5d3207f1f37cc8f7958f087308f18e227ae29181b6d83c2c3426824001ed5737fa550fd993eaa640c0d2b28671358f45b2b754e66d22e50af5468a90d9e53d043b589feda41b6f3c68b5046e1250397f806f06b015f199724f06b6a309c45768d9cb7b7b719780c9dfcc2ad9d5f944adb5cbf91db4fee31c8ae8356310fbafb1b82cf0df057bf14403160268ec506d4df8a150d760a"}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000440)) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (rerun: 64) 00:04:52 executing program 5: ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0x8) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000040)) 00:04:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xd000000, 0x0}) 00:04:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7e3001, 0x0) (rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x10000, 0xffff, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x1c, 0xacc53733367a9854, [{0x6, 0x5, "f42aba"}, {0x7, 0x11, "c78889dde5e1b0db669338ccbb0c98"}]}, @noop, @ssrr={0x89, 0x7, 0xde, [@local]}, @generic={0x89, 0xb, "b293163672f6678971"}]}}}}}) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000080)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xe78, 0x80000001, 0xa5, 0x0, 0x1f, "cc6c505e0fea780065bca476a960f0f11a381d", 0x2, 0x9}) syz_open_dev$I2C(&(0x7f0000000040), 0xc314, 0x4080) 00:04:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x9, 0xe, &(0x7f0000000000)="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"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000440)) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xe000000, 0x0}) 00:04:53 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:53 executing program 5: ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0x8) (async, rerun: 32) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000040)) 00:04:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @initdev}, &(0x7f0000000080)=0xc) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:53 executing program 3: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x81000000, 0xffffffffffffffff, 0x2}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) syz_open_pts(r3, 0x129400) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f0000000080)) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x10000000, 0x0}) 00:04:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @initdev}, &(0x7f0000000080)=0xc) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:53 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) 00:04:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x100a0000, 0x0}) 00:04:53 executing program 3: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x81000000, 0xffffffffffffffff, 0x2}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) syz_open_pts(r3, 0x129400) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f0000000080)) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x10000, 0xffff, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x1c, 0xacc53733367a9854, [{0x6, 0x5, "f42aba"}, {0x7, 0x11, "c78889dde5e1b0db669338ccbb0c98"}]}, @noop, @ssrr={0x89, 0x7, 0xde, [@local]}, @generic={0x89, 0xb, "b293163672f6678971"}]}}}}}) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000000080)) (async) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xe78, 0x80000001, 0xa5, 0x0, 0x1f, "cc6c505e0fea780065bca476a960f0f11a381d", 0x2, 0x9}) (async) syz_open_dev$I2C(&(0x7f0000000040), 0xc314, 0x4080) 00:04:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @initdev}, &(0x7f0000000080)=0xc) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80800) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x11000000, 0x0}) 00:04:55 executing program 3: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x81000000, 0xffffffffffffffff, 0x2}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, 0x0) (async, rerun: 64) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (rerun: 64) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) syz_open_pts(r3, 0x129400) (async, rerun: 64) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f0000000080)) (rerun: 64) ioctl$KDFONTOP_GET(r1, 0x4b3a, 0x0) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) (async) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80800) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x12000000, 0x0}) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) 00:04:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x6, 0x101, 0x7ff, 0x2, 0x0, "cd7f2ecec2d86840850584886188ca22b8117f"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1, 0x2, 0x786, 0x7, 0x3, "f31748675cede88c9a4f6ca1294e307a4e915c"}) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x18000000, 0x0}) 00:04:55 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x591040, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b33, 0x0) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet(0x2, 0x3, 0x6) accept4$inet(r1, 0x0, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80800) 00:04:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x6, 0x101, 0x7ff, 0x2, 0x0, "cd7f2ecec2d86840850584886188ca22b8117f"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1, 0x2, 0x786, 0x7, 0x3, "f31748675cede88c9a4f6ca1294e307a4e915c"}) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 00:04:55 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x25000000, 0x0}) 00:04:55 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x591040, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b33, 0x0) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$inet(0x2, 0x3, 0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) accept4$inet(r2, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 00:04:55 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) 00:04:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x6, 0x101, 0x7ff, 0x2, 0x0, "cd7f2ecec2d86840850584886188ca22b8117f"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1, 0x2, 0x786, 0x7, 0x3, "f31748675cede88c9a4f6ca1294e307a4e915c"}) (async) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1, 0x2, 0x786, 0x7, 0x3, "f31748675cede88c9a4f6ca1294e307a4e915c"}) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5c000000, 0x0}) 00:04:55 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 00:04:55 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x591040, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b33, 0x0) 00:04:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x6, 0x101, 0x7ff, 0x2, 0x0, "cd7f2ecec2d86840850584886188ca22b8117f"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x1, 0x2, 0x786, 0x7, 0x3, "f31748675cede88c9a4f6ca1294e307a4e915c"}) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xffffe000, 0x0}) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$inet(0x2, 0x3, 0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) accept4$inet(r2, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 00:04:55 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) (async) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xffffff7f, 0x0}) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x19, 0x0, 0x0, 0x0}) (async) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 00:04:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$inet(0x2, 0x3, 0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 00:04:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000100)={0x0, 0x87, ""/135}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000940)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000001c0)={0x5, r2, 0x80000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000800)={0x8, 0x0, [{0xd000, 0xed, &(0x7f0000000200)=""/237}, {0x6000, 0xd2, &(0x7f0000000300)=""/210}, {0x1, 0xe3, &(0x7f0000000400)=""/227}, {0x2, 0xf6, &(0x7f0000000500)=""/246}, {0xf001, 0x80, &(0x7f0000000600)=""/128}, {0x4, 0xb1, &(0x7f0000000680)=""/177}, {0x0, 0x2f, &(0x7f0000000740)=""/47}, {0x1000, 0x63, &(0x7f0000000780)=""/99}]}) 00:04:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x7ff) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4042, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xd, 0x1d, 0xa4}) 00:04:55 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0xe2, ""/226}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0}) r2 = eventfd2(0xfffffffc, 0x80000) write$eventfd(r2, &(0x7f0000000180)=0x10001, 0x8) 00:04:55 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$inet(0x2, 0x3, 0x6) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 00:04:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x7ff) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4042, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 00:04:55 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000100)={0x0, 0x87, ""/135}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000940)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000001c0)={0x5, r2, 0x80000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000800)={0x8, 0x0, [{0xd000, 0xed, &(0x7f0000000200)=""/237}, {0x6000, 0xd2, &(0x7f0000000300)=""/210}, {0x1, 0xe3, &(0x7f0000000400)=""/227}, {0x2, 0xf6, &(0x7f0000000500)=""/246}, {0xf001, 0x80, &(0x7f0000000600)=""/128}, {0x4, 0xb1, &(0x7f0000000680)=""/177}, {0x0, 0x2f, &(0x7f0000000740)=""/47}, {0x1000, 0x63, &(0x7f0000000780)=""/99}]}) 00:04:55 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0xe2, ""/226}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0}) (async) r2 = eventfd2(0xfffffffc, 0x80000) write$eventfd(r2, &(0x7f0000000180)=0x10001, 0x8) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xd, 0x1d, 0xa4}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xd, 0x1d, 0xa4}) (async) 00:04:55 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$inet(0x2, 0x3, 0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 00:04:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async, rerun: 64) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000000)=0x7ff) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4042, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xd, 0x1d, 0xa4}) 00:04:55 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000080)={0x0, 0xe2, ""/226}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0}) r2 = eventfd2(0xfffffffc, 0x80000) write$eventfd(r2, &(0x7f0000000180)=0x10001, 0x8) 00:04:55 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r5, 0x30, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}}, 0xa0) 00:04:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDISABIO(r1, 0x4b37) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0xb, 0x1, 0x110, &(0x7f0000000080)}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000d40), 0x106}}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) 00:04:55 executing program 5: socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x27, 0x15, &(0x7f0000000000)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000440)={0x1, 0x1, 0x13, 0xfffffffe, 0x3, 0x0}) 00:04:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r2, 0x8001af71, &(0x7f00000000c0)) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000000)) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, &(0x7f0000000140)={0xc6b6, 0x44, "5f5b1d9f0af2817ca9ae68db0878a71e11edf53b66602db33236afb01dfccbdb2c4ee19908e6a0b623d331548fd86f655228f22bf87c52aab0a7031b60fd2af9d4e3f680"}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, 0x0) r5 = eventfd2(0xf1, 0x80802) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r5}) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:04:55 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 00:04:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000100)={0x0, 0x87, ""/135}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000940)) ioctl$KDFONTOP_GET(r0, 0x4b33, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000080)) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000001c0)={0x5, r2, 0x80000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000800)={0x8, 0x0, [{0xd000, 0xed, &(0x7f0000000200)=""/237}, {0x6000, 0xd2, &(0x7f0000000300)=""/210}, {0x1, 0xe3, &(0x7f0000000400)=""/227}, {0x2, 0xf6, &(0x7f0000000500)=""/246}, {0xf001, 0x80, &(0x7f0000000600)=""/128}, {0x4, 0xb1, &(0x7f0000000680)=""/177}, {0x0, 0x2f, &(0x7f0000000740)=""/47}, {0x1000, 0x63, &(0x7f0000000780)=""/99}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000800)={0x8, 0x0, [{0xd000, 0xed, &(0x7f0000000200)=""/237}, {0x6000, 0xd2, &(0x7f0000000300)=""/210}, {0x1, 0xe3, &(0x7f0000000400)=""/227}, {0x2, 0xf6, &(0x7f0000000500)=""/246}, {0xf001, 0x80, &(0x7f0000000600)=""/128}, {0x4, 0xb1, &(0x7f0000000680)=""/177}, {0x0, 0x2f, &(0x7f0000000740)=""/47}, {0x1000, 0x63, &(0x7f0000000780)=""/99}]}) 00:04:55 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dvb_usb_cinergyT2', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$inet(0x2, 0x3, 0x6) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000100)) accept4$inet(r3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$KDFONTOP_GET(r1, 0x4b32, &(0x7f0000000680)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111}}, 0x20) 00:04:55 executing program 5: socket$l2tp(0x2, 0x2, 0x73) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x27, 0x15, &(0x7f0000000000)="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