8 = dup3(r7, r0, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
dup3(r6, r5, 0x0) (async)
dup3(r7, r0, 0x0) (async)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef) (async)

15:10:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x272101, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7f}, {0x2, 0x6}, {0x401, 0x1}]}) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0) (async)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2c4080, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0x9, {0x30, 0x20, 0x3, 0x6, 0x100000001}})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:30 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
syz_open_pts(r0, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
r8 = dup3(r7, r0, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
dup3(r6, r5, 0x0) (async)
dup3(r7, r0, 0x0) (async)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef) (async)

15:10:30 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

15:10:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TIOCCONS(r5, 0x541d)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000))

15:10:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x272101, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7f}, {0x2, 0x6}, {0x401, 0x1}]}) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2c4080, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa) (async, rerun: 32)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (rerun: 32)

15:10:31 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x0, 0x1, {0xa, 0x4e20, 0xf99, @mcast2, 0x400}}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="af26c6f361b9de7f1b3d8c46d27fb8e71c8e5417040879a0a49dcb9d718d97658f1ab5a12e81a7806d8f225299c3b2ed6542a1f0946bc423b50ad27dbab907", 0x3f}, {&(0x7f0000001200)="118f051470fd0d6131e73ae459af73271833", 0x12}], 0x3}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7ffffffc, 0xb, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = signalfd(r6, &(0x7f0000000000)={[0x401]}, 0x8)
read$eventfd(r7, &(0x7f0000000040), 0xe98bafd0ae8ac66)

15:10:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:31 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0x9, {0x30, 0x20, 0x3, 0x6, 0x100000001}}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:31 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

15:10:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:32 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TIOCCONS(r5, 0x541d)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
ioctl$TIOCCONS(r5, 0x541d) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r6, 0x0) (async)
dup3(r7, r6, 0x0) (async)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) (async)

15:10:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r2, 0x540b, 0x2)
ioctl$TCXONC(r0, 0x540a, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8cca, 0x800, 0xf07e, 0x4, 0x1}})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:32 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x0, 0x1, {0xa, 0x4e20, 0xf99, @mcast2, 0x400}}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="af26c6f361b9de7f1b3d8c46d27fb8e71c8e5417040879a0a49dcb9d718d97658f1ab5a12e81a7806d8f225299c3b2ed6542a1f0946bc423b50ad27dbab907", 0x3f}, {&(0x7f0000001200)="118f051470fd0d6131e73ae459af73271833", 0x12}], 0x3}, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7ffffffc, 0xb, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = signalfd(r6, &(0x7f0000000000)={[0x401]}, 0x8)
read$eventfd(r7, &(0x7f0000000040), 0xe98bafd0ae8ac66)

15:10:32 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TIOCCONS(r5, 0x541d)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
ioctl$TIOCCONS(r5, 0x541d) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r6, 0x0) (async)
dup3(r7, r6, 0x0) (async)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) (async)

15:10:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x80800)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x2)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x80800)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x2)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x80800) (async)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x2) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x80800)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x2)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x80800) (async)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x2) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0)
close_range(r0, r1, 0x0)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:32 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 64)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0x9, {0x30, 0x20, 0x3, 0x6, 0x100000001}}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:32 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:32 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r2, 0x540b, 0x2)
ioctl$TCXONC(r0, 0x540a, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8cca, 0x800, 0xf07e, 0x4, 0x1}})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$TCFLSH(r2, 0x540b, 0x2) (async)
ioctl$TCXONC(r0, 0x540a, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8cca, 0x800, 0xf07e, 0x4, 0x1}}) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:33 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x0, 0x1, {0xa, 0x4e20, 0xf99, @mcast2, 0x400}}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000001c0)="5417ad24c06783527999490846b264066a87157c0bcdb795daca6523c9bb3e2fbbab3f719cc2b541bb9f0f609191af9e6ad6746c6cc6a81ce91dff121d6eee3870b288edcb893fd5eced71d4647ebf02df8efd16a309e55d752e44f540b88f4f66c1741f7f91b3e7b7c333a3f5815d3d664b3fe1c55c410097418b9054d4ea584559f9d06a93a97c2a94ad8c34bef517b5f16c3e85fa61fed9bbbec1b6c67b34601ce77e5bd2e8cb3a786c628cd0e860387587fa8dbfae3db4a1f0a008c9f1b8b540c05d87bc9f794d18a4d0a498800b9d8effb3ee9d88efe6e8cdc9ad048b778efbf0ff458a74aab1b3c1d9b95b6c94ffd8e199f4cf29818c7f9f7e22a1e762a208de3894315ea83b7f9ddefb7b8839a13db82519adac9126ae918ad0542599c3596a2e9357b6947478c793d50aa6491a54e30bf445f5eed903d5cd1d23a58f4710b1b508bea39589666c3f24c0caa89467997bc30e823f867f6c7ae6d1776a51b480f4b4c54e14c061beafa4b78c6235b8e91ee849fa97100ad1d92b3f13be150b312a54502e7d45b1ad29f4a42f1d7f9068cf12e989ef5f6204055d6892a3e7cc1716dc0785a011793b734d6751b09f1ce2e46ae2385fbc1fe982de3447424f93820cc7a84b191d29ee4b32e0b8dc0039096b968bd13f87e308a9a50a763fdb848556b0c4fc224a0aa720c54b21f8c445fd5a8d439eb2dea4d29e070ba5b7793b6e5c827613b524c54a3bd1bce0ac98ed30921d86b1cac0792b4c48ec082c41695f89cf15656634fec261176c7e5160b7bfbb53ab4ed685c9cbd299053a2fea9e4f792507bc1c57951b143fa7bf23350276caab6dfa44a185214b1faa921ebf428b59e34761fcd9cf88b32c4ad7e1f167308bc26c5b28de2585876be2e6470d742a85e19e8ab5371f6b636adadd7d9489779df0fc6c179a44c3ca98e2dc9fd0077e345951be75ddd03669831c6b7231e4e2bb20c165fbcf566f7c2cddb7b772143b62751dcaef23efc3df043c72ae8d8f74476809a8e35ba9ba43201c38fd36f90a73fe4008fcd335703d689a212c3048c20a5012c3d6de08cb5de6407f8214abc4582d750fd92a4a075f6ef06cdd2d0135fc1c31b4c75714665205c37495ed594bb74fbcfffee36549d0e4c9f8a5ba401c4e2757044c4e02c86f65a2e40d4c51b60546c756ff8946a3852d069a3908cb3844484f89489cf6143eb62709622c143b0bfc091636c43e631cc7a7e4335c7867a5078fd987aa6a5a590752e39a3b5b95c3e37801cfa1a5b95a92122c019cf1801fcad68d63b90ded8887106a258d463f805c9492f67d0784e88b628a710769834242dc9045f4494a1d3afa86bd26b2d997816ed6255c8d061433b83fec705b3224ab70b5dafaf5c9ee1e17fa87b9bfb9c8989686ee9509d2afe7503ab88e9ec91c5d872f675ed83acda6fa3d09f8485e9e12d6b3d5501a7c18c538f11e9ff78f2e3a65d5cbf814cde594b632bb71af0dfda4684ad1f145609832bd9f75cff6c4e24321fb87e2ec0eeeda5b08d4293f96cd13237a4f56f6228eba879ba85249ac4349e47934a45be5aa90d2be14747728babb5b04ad0ee632e6fa96d4a2505ca65891add4d7b0f08aac09cfd4259dbc0236ba6df60d866ccb71c686a34452fa17e96f324f86986c775260cc4216a0eb6aa52786f3e4f9d5212d2f4633a0270411eaee56d9337b9f52a4931d814ab493c36789a3d869157dfd776811db7825563e9c04dc97b44be21571f619004d619be114c23525edfa655934c9fb958e11315caac504ae203359d36a91c4ef0ac00cd2226d1cfd0d379542bdea126c6feedb037e6077d1822bbf96a8f67def6332da59054c0555f9bbbcf3d1210664c04be6f775064c4ca67bac8881b56bbbd56fd96ac3224b1ecfbc52297689fc87391cec4ae6dfd6fa5858225309ce3a0ab05417a2d9b958bea47fabbb539bfcb0eb15a97345ec6f235bc2743938a96f2bc1fb9b14f61491acb73cf9c06f7502748e65b90a298ebfb944104fdc3114aa94f09508ff5db1c532d8cd3bf2a559fa064ae2d830b3f4b0cf8fdb0d14d85539a95fb462100ef4048d9d72debc194b7751ddc21b38caf7632b83d36fd604c94bac16d3ba1a221505ac385a043da783221b9c3fe1baabeb5099dffae8ede044342122d550b2b93f57fa2b27b7415fcd1c35f774444f15fefd61f15782b27cb870cf9321c87384ed369d2e0f31d3c961366960bf65ff057502e04fee84aa11e91b8e1e7f04ae900c8c3be1af4d5b70d1ef24497438f5c74b52b37ca7f620d071c60580817a8b5cbc92ab4a72d43b1941bf58a9a7e445dd3f8e24b7b94c914f0acdb8219b22a717ae364115a1220c6cf648e5fab8c07e581710188ea44be89acb7ed69ecefc861d4c090e103a32de96b9af53e73a424c48422afad634b2e68278180f7ac20a93eb0ff95dde760df40f6e2adbf9bc5bbaa1bcc9db3d8dfd8ac6e91f9dee99c552f237ed71b2f09fe19c8b6d90fe11eba48954648c45a5d2579d74c638bc88a987e132de3493b41c161c2777d44927e63ba00f188b76ca7a5cd47c4e66ea8a37abd9b8d767776f54f91a8e94e8f4ea6064776185ebe91024a3cae36183cafba079c23a9befdab448b8740d7eaa9f50dcaf7494bbad6e3a83b8ed34c1fae456475a62e44860ea12eab40ae2de36f45c85f9ecd48d14d70a087d319631238b8301ea92e29487df73ac1eb2556f8e03079398ad64faddbcc22aa4c1d8b11e54d32384a0a435dfd4e1cdc2729653b7f28a19e266f3466266338e3badd1c35fa8fedc1b05a100cf7982ef06817f2804242436507f5b33551f53b0459d7e9aecd794d151cf32688018374d6c00c85dae02a7a4eee1b2f1318102ccd1f6471f5d26071148554f863d59809777b1987a101a94b85d7c92026e0fa0c9f46b55d0d788ab37f430a59db5fd548694a84bce2b2905c201a23ce45a3be74659c3663babbcaf04827a7c0dbd45ee4ecc26edfefdc2acb64c6412d47beac3a128fca82ea07ff00296eecc8fe6d5267be286096ab86e29a65c5960463ab76dc4666d7bb27157bccf09e72272bc2408ded2de67ff91e2f183066094c2e476641ebe07cee38d0e08b623a53aa0db8d0a1e9a75b1fcfb928dc9ebcff357b287cb019e33389cd3396d16759ff89f91d43a6ea77d6c296c078c43ba5b94c6b888c6133e104f384aa047cb4efeb69c49f642601c3ce66394a597132969df4bf624631fe8387f9efb7dff2ec13beac0026cb4e0638aa69a06976853598b80495d720b671aefcaa7f5d32528a36c75f0e0e41d95d8639631c994e366d9b0f980da43fbdf4c7dc8e8bcc5ee58b5398fae964bdbc9e3e430f639bca8548ed7de0852621845ec40ed25ba856c33977f4347673006d9be50747c77c8662ba3a5075706b150824f5fd4705443a6d47f1530c7bdaa0b66dff50163a75bb821466b6c0e5ccd48aba8b53febca8d836a4541fb849d98be1c92cc857983deebb82bb860e70e1510c30bce37ace152dae82bcf185342c471800b80116e9030be67024a2d0d769bddb8a03eae90b5ef0977d59cef1ca52b35e4c6947fde3c5233df79b2f993590b21e722f5ed05b868c81bb4cd9ebf20d7f225917e8b37918696e195b5824c2635faf08d344d064204748459fb8c4fc3df6112e99a18cecc190976a8fe9fcb103494633257fd82085e6535360b187a98119068e015db76eb646add39672ac12f9818acbf2a048d1d40cdf0a9dd5d1c62d3fa8ff785bafe404f3ec9b02981b15608f9fb4513204b0523ff5a5b4843bc555a38e42a9b2e009a5a06a777bcf98b03a5f064294530ac2057603a9bc37829544a1b14d295b43dad7743cfcf5816776e603ae7193afb26f873e081a6f74847bc3591f3491539ef1a0af836418c15530baf89d8ed863383c64dffc84e25bce9317f79af96083e4073a6730fd76a5fd3920a4af4eb94780ded44095785b353d4206429bb5cd3f1e9984532b3eba7255147ecd99158ca1b5e71ff9c0c818d55132161a4a26dfa5eb90dcf482edfedc144d889f3a02239d2626e13e557745e9be9c25294b19f19bb9227a0718e9e16570f9ffc3178a060b3d6f4ea932b1823282c2de4797b3665c50b258594277c2927bb8e6e3a157fc12dafd16678e13625196295749dd15edb45eadfe88ad80b55c81dff503a8562f284eac688b2bbe1066a90d6de6ed3495a3c6a68c8abee117acccb8c6c900855bfbb6ec31aabdb4e129f7da77539f8378db773ee5f9f8327ae4f4ef90cb8e0531e858d32c0df774b7253d3fd161568ceefeadadf7e6e4633ba3318b67a2a2265d6f308cef611b851d3eefd6c5126ddc0710efbebd8fc340fe59a62ea3127358a9480d33b722d5d8204fb6716b96ce4116a39ab8f2f669e56ae9bcbafff1a44e01c8a13a916461ecbcf0967700e6eb935a1170eb5a2f25e0a6ef2f5f4e339b6a68d1f73fbefbc255c3dd577e79221c3f72b97455d8acc28e19b704f6228d406b0836b08109909ed220879ea9af08024af978ff9c9dbdc20e0d6f129962ad7d0285c5d4d49451dc0e423cf612f90b81a9a3d69704f3066ec230cc79a29ee8a2dfd4ee759aa36b955cb6f972e9e87fc878d10bdfcbe01e35b05d0c4f686a1717e0c58d9bc96eeb9facb6a6aa5a931f1e37c811e1fe83868563345fd5778ed7b3fadfe9b0b3240b90a0aace48763d28ffdb71913a18011c6e111674a5d5da6394018bb97076fcb5aa32c582d57977b25714ac3839ade34a86fe9985706169f915a6b45ee00f98ff8b4c31398cd4b28aeb04c1e5cfeba1c261e892ba39c71ba035a4eadae0453bff978115d4213591e9e968a9876b7b92da3a7cd818e1d63c0237a8e128a0844f9974db637ae91b106cb41000e3d79d758c7e9dae44c52748e91a25d81fafe0caf32517f7cbfb37c2adc77eae4ee85edbad3bcd63b336e5d6009597b4e135d5ae25c7e104c38f57ea26ac193c2590cdf3e5e357ff22a259cd99c7b49bac08f6236e219811f325a6a2372d05a5143b9a521c6c45094876af6e3b753d6006ce4a89bf44a5d9dd6d435e6c0c59aea6804d4dd2ecb85d67770f3f3dae4bd7388d6bb2bed15f3b0e5f2d3979f71cdcf2e85660e4f81517ca62664505c788fcf51b65bbdabf4e13d6c541d2c075f49561fcd7f68d62c6ef72c4e47764a14873f272af4cbd578f1772810ee9897c4cb5ca999dd4ff3095dacc02d458154292a0a6bb229e68a26abc8e9a4d6d0a535e4c8be1938aa98edfc51035d90cb4aac5e8b22e6901e7793b9e34bbc61e248c643758fb0a0ff0d3dbf7271b497b6e182040957e975a9e030f9acb31a017f240084129471e8270b3e19809b9b1e52a81b45feca69a6e92b803df9ddc5161cfe4b13d9b48a6a3f57c3f07249c98442f49b2cb79f8cfec3e1abe81ff6b7fbaffe51903f71bb150e8718562537ffc3c014be138243133b8d33fa3a1c0516f8ef7b68f47b6f46d79f86f2e5b7a66b934416abcaa78cc5741f091bebbc2150585533d9faaeef3aefc414df3adf94e441996cb45ee562520e3972e0d8537e8f21d673022d9ae1a83cbbade6df3bd586b627d8af7f6364186537f320618a0457a96af29eedaea54ae6d15574be03cfff43682a117ad3c8b7a8315f5b01941f4e863f7c97caba89dd03b73c00be5c80bd77643d9674f27ae36f99771f9b0286cad2354d6b1b7bc010161851adb287c916da24f9b2130e1bd86a7f74c175c8114da1e994a9298277a2c26ed206658a4c5154a7bf5ccc0dd7c1399d", 0x1000}, {&(0x7f00000011c0)="af26c6f361b9de7f1b3d8c46d27fb8e71c8e5417040879a0a49dcb9d718d97658f1ab5a12e81a7806d8f225299c3b2ed6542a1f0946bc423b50ad27dbab907", 0x3f}, {&(0x7f0000001200)="118f051470fd0d6131e73ae459af73271833", 0x12}], 0x3}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7ffffffc, 0xb, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = signalfd(r6, &(0x7f0000000000)={[0x401]}, 0x8)
read$eventfd(r7, &(0x7f0000000040), 0xe98bafd0ae8ac66)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x0, 0x1, {0xa, 0x4e20, 0xf99, @mcast2, 0x400}}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="af26c6f361b9de7f1b3d8c46d27fb8e71c8e5417040879a0a49dcb9d718d97658f1ab5a12e81a7806d8f225299c3b2ed6542a1f0946bc423b50ad27dbab907", 0x3f}, {&(0x7f0000001200)="118f051470fd0d6131e73ae459af73271833", 0x12}], 0x3}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7ffffffc, 0xb, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r4, 0x0) (async)
dup3(r5, r4, 0x0) (async)
signalfd(r6, &(0x7f0000000000)={[0x401]}, 0x8) (async)
read$eventfd(r7, &(0x7f0000000040), 0xe98bafd0ae8ac66) (async)

15:10:33 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0)
dup3(r2, r3, 0x80000)
r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x10001)
r5 = epoll_create1(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r3, 0x2, 0x80000})
fremovexattr(r4, &(0x7f0000000000)=@random={'user.', '{\x00'})

15:10:33 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0)
close_range(r0, r1, 0x0)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x9, 0x574335fb, 0x3, 0x10000, 0xd, "6f1ca6f5b9348f0215511cef146057ec488444"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:33 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (rerun: 64)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r2, 0x540b, 0x2)
ioctl$TCXONC(r0, 0x540a, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8cca, 0x800, 0xf07e, 0x4, 0x1}})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$TCFLSH(r2, 0x540b, 0x2) (async)
ioctl$TCXONC(r0, 0x540a, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x8cca, 0x800, 0xf07e, 0x4, 0x1}}) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088000000000000000100"})
r1 = syz_open_pts(r0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080))
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088000000000000000100"}) (async)
r1 = syz_open_pts(r0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) (async)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088000000000000000100"})
r1 = syz_open_pts(r0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080))
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x5, 0xe1, 0x6, 0x0, 0xf, "51d564118a67bcf43a244d9d5e40e6cca0c777"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:34 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0)
dup3(r2, r3, 0x80000)
r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x10001)
r5 = epoll_create1(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r3, 0x2, 0x80000})
fremovexattr(r4, &(0x7f0000000000)=@random={'user.', '{\x00'})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
dup3(r2, r3, 0x80000) (async)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x10001) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r6, 0x0) (async)
dup3(r7, r6, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r3, 0x2, 0x80000}) (async)
fremovexattr(r4, &(0x7f0000000000)=@random={'user.', '{\x00'}) (async)

15:10:34 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0)
close_range(r0, r1, 0x0)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) (async)
close_range(r0, r1, 0x0) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:34 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="62555e14f89a30d9ce182157077ac42205b41db014b41bc456ae6a49f6c391379667c02a9b8e48eb627266ab754c9d1e5838b37365794ec3d714039002dc986d5298ccee0805cbbdb039a650802cb55cd3e8b24aeb1e93e711257406ca2d0f5170149699c11c969e0431689f7a8caebf6608b94872c16af12b66cb2105e5f5478bbef141d748dea3c388"], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:34 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x9, 0x574335fb, 0x3, 0x10000, 0xd, "6f1ca6f5b9348f0215511cef146057ec488444"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x9, 0x574335fb, 0x3, 0x10000, 0xd, "6f1ca6f5b9348f0215511cef146057ec488444"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:10:34 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:34 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async, rerun: 64)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180)) (rerun: 64)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
dup3(r2, r3, 0x80000)
r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x10001) (async)
r5 = epoll_create1(0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r3, 0x2, 0x80000}) (async)
fremovexattr(r4, &(0x7f0000000000)=@random={'user.', '{\x00'})

15:10:34 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x17f9]}, 0x8, 0x80000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x3fa, 0x1000, 0x1, 0x6, 0x19, "a6da1d21aca57880fd30f85a33ad5194dcb031"})
syz_open_pts(r2, 0x200000)
r5 = dup3(r1, r0, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)

15:10:34 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r2 = syz_open_pts(r1, 0x0) (rerun: 64)
dup3(r2, r1, 0x0) (async, rerun: 32)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="62555e14f89a30d9ce182157077ac42205b41db014b41bc456ae6a49f6c391379667c02a9b8e48eb627266ab754c9d1e5838b37365794ec3d714039002dc986d5298ccee0805cbbdb039a650802cb55cd3e8b24aeb1e93e711257406ca2d0f5170149699c11c969e0431689f7a8caebf6608b94872c16af12b66cb2105e5f5478bbef141d748dea3c388"], 0xff2e) (rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYBLOB="6ef0db20cfda9eda05bf5f9309539b2a4754fca45123d5ff091479f7d8e94715ff61ea7d21eef0518cef1a25bea53e1ea9ea69d760f5bdf045bbb42a82ff7eb6efc8a71cf7dd448af01a5644ab929b05619419b40a66f79edf6f5c4e8a5dcd66ed7b5957d4c07c56e25b17b7c1606b91f151d4a0a0155a41d267a8de4fd8e5b1d118de6f6231f6bc9cdc750e209406794db3557b2a833f0648dd982707b17b48b10298a75fe27fee74714d961601b6adac477734", @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="a2ae19e364206a88fafbae41341552958451021bf47cb71ce64c2f0e98fc5bf93900"], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r2, 0x0)
dup3(r7, r2, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x4}, {0x8, 0x7}, {0x7, 0x9}]})
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:34 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x5, 0xe1, 0x6, 0x0, 0xf, "51d564118a67bcf43a244d9d5e40e6cca0c777"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "00407a90847088d94d286000"}) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x5, 0xe1, 0x6, 0x0, 0xf, "51d564118a67bcf43a244d9d5e40e6cca0c777"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:35 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x5, 0xe1, 0x6, 0x0, 0xf, "51d564118a67bcf43a244d9d5e40e6cca0c777"}) (async)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="62555e14f89a30d9ce182157077ac42205b41db014b41bc456ae6a49f6c391379667c02a9b8e48eb627266ab754c9d1e5838b37365794ec3d714039002dc986d5298ccee0805cbbdb039a650802cb55cd3e8b24aeb1e93e711257406ca2d0f5170149699c11c969e0431689f7a8caebf6608b94872c16af12b66cb2105e5f5478bbef141d748dea3c388"], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:35 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x9, 0x574335fb, 0x3, 0x10000, 0xd, "6f1ca6f5b9348f0215511cef146057ec488444"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:35 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffd, 0x0, 0x0, 0x0, 0x1, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x9)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:35 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x17f9]}, 0x8, 0x80000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x3fa, 0x1000, 0x1, 0x6, 0x19, "a6da1d21aca57880fd30f85a33ad5194dcb031"})
syz_open_pts(r2, 0x200000)
r5 = dup3(r1, r0, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
signalfd4(r0, &(0x7f0000000000)={[0x17f9]}, 0x8, 0x80000) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x3fa, 0x1000, 0x1, 0x6, 0x19, "a6da1d21aca57880fd30f85a33ad5194dcb031"}) (async)
syz_open_pts(r2, 0x200000) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef) (async)

15:10:35 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = epoll_create1(0x0) (async, rerun: 32)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r5 = syz_open_pts(r4, 0x0) (rerun: 32)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYBLOB="6ef0db20cfda9eda05bf5f9309539b2a4754fca45123d5ff091479f7d8e94715ff61ea7d21eef0518cef1a25bea53e1ea9ea69d760f5bdf045bbb42a82ff7eb6efc8a71cf7dd448af01a5644ab929b05619419b40a66f79edf6f5c4e8a5dcd66ed7b5957d4c07c56e25b17b7c1606b91f151d4a0a0155a41d267a8de4fd8e5b1d118de6f6231f6bc9cdc750e209406794db3557b2a833f0648dd982707b17b48b10298a75fe27fee74714d961601b6adac477734", @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="a2ae19e364206a88fafbae41341552958451021bf47cb71ce64c2f0e98fc5bf93900"], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r7 = syz_open_pts(r2, 0x0)
dup3(r7, r2, 0x0)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x4}, {0x8, 0x7}, {0x7, 0x9}]}) (async)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x17f9]}, 0x8, 0x80000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x3fa, 0x1000, 0x1, 0x6, 0x19, "a6da1d21aca57880fd30f85a33ad5194dcb031"})
syz_open_pts(r2, 0x200000)
r5 = dup3(r1, r0, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
signalfd4(r0, &(0x7f0000000000)={[0x17f9]}, 0x8, 0x80000) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x3fa, 0x1000, 0x1, 0x6, 0x19, "a6da1d21aca57880fd30f85a33ad5194dcb031"}) (async)
syz_open_pts(r2, 0x200000) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef) (async)

15:10:35 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (rerun: 32)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = epoll_create1(0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYBLOB="6ef0db20cfda9eda05bf5f9309539b2a4754fca45123d5ff091479f7d8e94715ff61ea7d21eef0518cef1a25bea53e1ea9ea69d760f5bdf045bbb42a82ff7eb6efc8a71cf7dd448af01a5644ab929b05619419b40a66f79edf6f5c4e8a5dcd66ed7b5957d4c07c56e25b17b7c1606b91f151d4a0a0155a41d267a8de4fd8e5b1d118de6f6231f6bc9cdc750e209406794db3557b2a833f0648dd982707b17b48b10298a75fe27fee74714d961601b6adac477734", @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r0, @ANYBLOB="a2ae19e364206a88fafbae41341552958451021bf47cb71ce64c2f0e98fc5bf93900"], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r7 = syz_open_pts(r2, 0x0)
dup3(r7, r2, 0x0) (async, rerun: 32)
ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x4}, {0x8, 0x7}, {0x7, 0x9}]}) (rerun: 32)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1332, 0x0, 0x3f, 0x8000, 0xb, "3ea44d6e97a60818c312ddba0b2ab7881f8131"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x4, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000180))
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:10:35 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
read(r2, &(0x7f0000000140)=""/173, 0xad)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2)

15:10:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = epoll_create1(0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r8 = syz_open_pts(r7, 0x0)
r9 = dup3(r8, r7, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRES32=r9, @ANYRESOCT, @ANYBLOB="515ba1dcb447510a743ac591630786eb8a7d37039a49c17d097de6478a17e92c142fb9424a04f8d13d7e94ae12fbd37e5f2d4c1c79e0e41d9e6ba6871ba1a3805442abbccdffc95c3f5e92c62f18f95c9275c7d9ca82c9d29f7eecc7d1607e6b851951db8bee", @ANYRES16=r1, @ANYRES16, @ANYRESHEX], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r10 = syz_open_pts(r0, 0x0)
dup3(r10, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:36 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffffffffffff2f)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080))
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:36 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffd, 0x0, 0x0, 0x0, 0x1, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (rerun: 32)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x9) (async, rerun: 32)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (rerun: 32)

15:10:36 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:36 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
read(r2, &(0x7f0000000140)=""/173, 0xad) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2)

15:10:36 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1332, 0x0, 0x3f, 0x8000, 0xb, "3ea44d6e97a60818c312ddba0b2ab7881f8131"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x4, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000180)) (async)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:10:36 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = epoll_create1(0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r8 = syz_open_pts(r7, 0x0)
r9 = dup3(r8, r7, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRES32=r9, @ANYRESOCT, @ANYBLOB="515ba1dcb447510a743ac591630786eb8a7d37039a49c17d097de6478a17e92c142fb9424a04f8d13d7e94ae12fbd37e5f2d4c1c79e0e41d9e6ba6871ba1a3805442abbccdffc95c3f5e92c62f18f95c9275c7d9ca82c9d29f7eecc7d1607e6b851951db8bee", @ANYRES16=r1, @ANYRES16, @ANYRESHEX], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r10 = syz_open_pts(r0, 0x0)
dup3(r10, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r7, 0x0) (async)
dup3(r8, r7, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRES32=r9, @ANYRESOCT, @ANYBLOB="515ba1dcb447510a743ac591630786eb8a7d37039a49c17d097de6478a17e92c142fb9424a04f8d13d7e94ae12fbd37e5f2d4c1c79e0e41d9e6ba6871ba1a3805442abbccdffc95c3f5e92c62f18f95c9275c7d9ca82c9d29f7eecc7d1607e6b851951db8bee", @ANYRES16=r1, @ANYRES16, @ANYRESHEX], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r10, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:36 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffffffffffff2f) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r2 = syz_open_pts(r1, 0x0) (rerun: 64)
dup3(r2, r1, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080))
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r3 = syz_open_pts(r0, 0x0) (rerun: 64)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:36 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffd, 0x0, 0x0, 0x0, 0x1, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x9)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:36 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:37 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = epoll_create1(0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r8 = syz_open_pts(r7, 0x0)
r9 = dup3(r8, r7, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRES32=r9, @ANYRESOCT, @ANYBLOB="515ba1dcb447510a743ac591630786eb8a7d37039a49c17d097de6478a17e92c142fb9424a04f8d13d7e94ae12fbd37e5f2d4c1c79e0e41d9e6ba6871ba1a3805442abbccdffc95c3f5e92c62f18f95c9275c7d9ca82c9d29f7eecc7d1607e6b851951db8bee", @ANYRES16=r1, @ANYRES16, @ANYRESHEX], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r10 = syz_open_pts(r0, 0x0)
dup3(r10, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r7, 0x0) (async)
dup3(r8, r7, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRES32=r9, @ANYRESOCT, @ANYBLOB="515ba1dcb447510a743ac591630786eb8a7d37039a49c17d097de6478a17e92c142fb9424a04f8d13d7e94ae12fbd37e5f2d4c1c79e0e41d9e6ba6871ba1a3805442abbccdffc95c3f5e92c62f18f95c9275c7d9ca82c9d29f7eecc7d1607e6b851951db8bee", @ANYRES16=r1, @ANYRES16, @ANYRESHEX], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r10, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:37 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffffffffffff2f)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080))
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffffffffffff2f) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:37 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x0, "00407a90847088d94d286000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xdc, 0x4, 0x2, 0x8, 0x1a, "7c229bfe729e6dbb6206a76e2636a27ac83eb9"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:37 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x81}}, './file0\x00'})
r2 = syz_open_pts(r1, 0x1090c1)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:37 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
read(r2, &(0x7f0000000140)=""/173, 0xad) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2)

15:10:37 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1332, 0x0, 0x3f, 0x8000, 0xb, "3ea44d6e97a60818c312ddba0b2ab7881f8131"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x4, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000180))
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:10:37 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xdc, 0x4})
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:37 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r1, 0x5608)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x80000001, 0x0, 0x2, 0x3, "bb9ed6748c3cce0689c8ebd58a5d0000000020"})

15:10:37 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:38 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x0, "00407a90847088d94d286000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xdc, 0x4, 0x2, 0x8, 0x1a, "7c229bfe729e6dbb6206a76e2636a27ac83eb9"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x0, "00407a90847088d94d286000"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xdc, 0x4, 0x2, 0x8, 0x1a, "7c229bfe729e6dbb6206a76e2636a27ac83eb9"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:38 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x81}}, './file0\x00'})
r2 = syz_open_pts(r1, 0x1090c1)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRESHEX=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x0, 0x6, 0x1})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f00000000c0)=0x5)

15:10:38 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x0, "00407a90847088d94d286000"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xdc, 0x4, 0x2, 0x8, 0x1a, "7c229bfe729e6dbb6206a76e2636a27ac83eb9"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xdc, 0x4})
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xdc, 0x4}) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)

15:10:38 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r1, 0x5608) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 32)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x80000001, 0x0, 0x2, 0x3, "bb9ed6748c3cce0689c8ebd58a5d0000000020"}) (rerun: 32)

15:10:38 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xdc, 0x4}) (async)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRESHEX=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "00407a90847088d94d286000"}) (async)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x0, 0x6, 0x1}) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0) (async)
ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f00000000c0)=0x5)

15:10:39 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x81}}, './file0\x00'})
r2 = syz_open_pts(r1, 0x1090c1)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) (async)
syz_open_pts(r1, 0x1090c1) (async)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:39 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r4, 0x0)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r5, 0x0)
r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
accept$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000140)=0x60)

15:10:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r1, 0x5608)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x80000001, 0x0, 0x2, 0x3, "bb9ed6748c3cce0689c8ebd58a5d0000000020"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
ioctl$VT_DISALLOCATE(r1, 0x5608) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x80000001, 0x0, 0x2, 0x3, "bb9ed6748c3cce0689c8ebd58a5d0000000020"}) (async)

15:10:39 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:39 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000))
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
read(r0, &(0x7f0000000100)=""/136, 0x88)

15:10:39 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRESHEX=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "00407a90847088d94d286000"}) (async, rerun: 32)
r5 = syz_open_pts(r0, 0x0) (rerun: 32)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x0, 0x6, 0x1})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0) (async)
ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f00000000c0)=0x5)

15:10:39 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r3 = epoll_create1(0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r4, 0x0) (async)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) (async)
epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0)
r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
accept$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000140)=0x60)

15:10:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r4, 0x0)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r5, 0x0)
r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
accept$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000140)=0x60)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r4, 0x0) (async)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
accept$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000140)=0x60) (async)

15:10:40 executing program 4:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

15:10:40 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (rerun: 64)

15:10:40 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:40 executing program 4:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) (async, rerun: 32)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (rerun: 32)

15:10:40 executing program 4:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(0xffffffffffffffff, 0x0) (async)
dup3(r0, 0xffffffffffffffff, 0x0) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) (async)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async)

15:10:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000000c0)={0x4, 0xf, &(0x7f0000000140)})
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = syz_usbip_server_init(0x2)
dup3(r5, r4, 0x80000)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x7)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:40 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) (async)
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
read(r0, &(0x7f0000000100)=""/136, 0x88)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
read(r0, &(0x7f0000000100)=""/136, 0x88) (async)

15:10:40 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe, 0xb, "00407a90847088d94d286000"})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x13)
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={<r5=>r3, 0x4, 0x3, 0x45})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
r7 = dup3(r6, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000180)={0x2026})
syz_open_pts(r7, 0x200840)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000))

[  543.865183][T31188] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19)
[  543.872127][T31188] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  543.879844][T31188] vhci_hcd vhci_hcd.0: Device attached
15:10:40 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCXONC(r2, 0x540a, 0x2) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe, 0xb, "00407a90847088d94d286000"})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x13) (async)
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={<r5=>r3, 0x4, 0x3, 0x45}) (async)
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
r7 = dup3(r6, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000180)={0x2026}) (async)
syz_open_pts(r7, 0x200840) (async)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000))

15:10:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe, 0xb, "00407a90847088d94d286000"})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x13)
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={<r5=>r3, 0x4, 0x3, 0x45})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
r7 = dup3(r6, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000180)={0x2026})
syz_open_pts(r7, 0x200840)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCXONC(r2, 0x540a, 0x2) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe, 0xb, "00407a90847088d94d286000"}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x13) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r4, r0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r3, 0x4, 0x3, 0x45}) (async)
syz_open_pts(0xffffffffffffffff, 0x0) (async)
dup3(r6, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000180)={0x2026}) (async)
syz_open_pts(r7, 0x200840) (async)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) (async)

15:10:41 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:41 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0)
r1 = dup3(r0, r0, 0x0)
r2 = fsmount(r1, 0x1, 0x8)
syz_open_pts(r2, 0x101a00)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x5, 0x4, 0x3, 0x4, 0x10, "2fe5c0a67f74d04efd4cb0af45b2a0622232d9"})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4, 0x40100, 0x2d, 0x3, 0x19, "04fe991671444fdaad3dad6fc8c7d46afaeba6"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000))
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef) (async)

[  544.568206][T31189] vhci_hcd: connection closed
[  544.568460][T24867] vhci_hcd: stop threads
[  544.577509][T24867] vhci_hcd: release socket
[  544.581918][T24867] vhci_hcd: disconnect device
15:10:41 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
read(r0, &(0x7f0000000100)=""/136, 0x88)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
read(r0, &(0x7f0000000100)=""/136, 0x88) (async)

15:10:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRES64=r0, @ANYRESOCT, @ANYRES16, @ANYRES32], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r3 = syz_open_pts(r0, 0x0)
r4 = dup3(r3, r0, 0x0)
r5 = epoll_create1(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140))
ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000000)=0x6)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:41 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000000c0)={0x4, 0xf, &(0x7f0000000140)}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
r5 = syz_usbip_server_init(0x2)
dup3(r5, r4, 0x80000)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x7)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0) (async)
r1 = dup3(r0, r0, 0x0)
r2 = fsmount(r1, 0x1, 0x8)
syz_open_pts(r2, 0x101a00) (async)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x5, 0x4, 0x3, 0x4, 0x10, "2fe5c0a67f74d04efd4cb0af45b2a0622232d9"}) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4, 0x40100, 0x2d, 0x3, 0x19, "04fe991671444fdaad3dad6fc8c7d46afaeba6"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0) (async)
epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRES64=r0, @ANYRESOCT, @ANYRES16, @ANYRES32], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r3 = syz_open_pts(r0, 0x0)
r4 = dup3(r3, r0, 0x0) (async)
r5 = epoll_create1(0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140)) (async)
ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000000)=0x6)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

[  545.202944][T31271] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19)
[  545.209585][T31271] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  545.217345][T31271] vhci_hcd vhci_hcd.0: Device attached
15:10:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9)

15:10:42 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x2, 0x0, 0x2, 0x0, "4389c801000000000000000500"})

15:10:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0) (async)
r1 = dup3(r0, r0, 0x0)
r2 = fsmount(r1, 0x1, 0x8)
syz_open_pts(r2, 0x101a00) (async)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x5, 0x4, 0x3, 0x4, 0x10, "2fe5c0a67f74d04efd4cb0af45b2a0622232d9"})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4, 0x40100, 0x2d, 0x3, 0x19, "04fe991671444fdaad3dad6fc8c7d46afaeba6"}) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRES64=r0, @ANYRESOCT, @ANYRES16, @ANYRES32], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r3 = syz_open_pts(r0, 0x0)
r4 = dup3(r3, r0, 0x0) (async)
r5 = epoll_create1(0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140))
ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000000)=0x6) (async)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r3], 0xff32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000004c0))
r4 = syz_open_pts(r0, 0x0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000d40))
r5 = dup3(r4, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xee00}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000003c0)={{0x2, 0x0, 0x7, 0x0, 0x5}, 0x5, 0x4b, 'id0\x00', 'timer0\x00', 0x0, 0x10000, 0x9, 0xfffffffffffffffd, 0x7})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESHEX=r6, @ANYRESOCT=r7])
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000d80)={0x1f, "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"})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x3, 0x14, "5da5eed576debcd09599a3cdb4a7881a838e00"})
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0)
write$binfmt_aout(r8, &(0x7f0000000500)={{0x107, 0x90, 0x2, 0x11e, 0x19e, 0x3ff, 0x1fd, 0x1}, "1251f2810c52597c885dc1a0b7d1db901297ffae777b52769a900e24a369efd535d91639ae1102eda4876f8bec3008253924fccbd3a6e5eedf60cb6e2f2c0530924a9283b5b95364c1d9a8e587e131378d73c72e09099fab28ee4151a634ae8d1584786d558f7c41510041139f3c077bfcd1f569d3c08297ac17c159ecbdd52354642c1fd8a493a4904ac15dd7d50e0f9258c0348c251ec180c0e68db011575c03a79e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

[  545.917995][T31274] vhci_hcd: connection closed
[  545.919450][ T5953] vhci_hcd: stop threads
[  545.928409][ T5953] vhci_hcd: release socket
[  545.932818][ T5953] vhci_hcd: disconnect device
15:10:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r3], 0xff32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000004c0))
r4 = syz_open_pts(r0, 0x0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000d40)) (async)
r5 = dup3(r4, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xee00}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000003c0)={{0x2, 0x0, 0x7, 0x0, 0x5}, 0x5, 0x4b, 'id0\x00', 'timer0\x00', 0x0, 0x10000, 0x9, 0xfffffffffffffffd, 0x7}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESHEX=r6, @ANYRESOCT=r7])
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000d80)={0x1f, "57ac799e83feb527198a4937a5890bd819ac4cb4bfd4de71f1095c803a2bc0a539cfa844eb9a74354c64e8f5895ccc06c342c9fb9f53aede5d07b1d045a533461c78dcb1d20fccd112dd56e8b8c62b259ce5d21da6700ff28ace89c628bb75dcb18bfdd21ef391856d00431daee7b81cc620d250a6bb9efc0b372c1a360ab36cf041c7b209682f305b5472609bee6bd9e269ba56cdd4fef2cfb828200f3b6af12e7de13091bd54ffd7380ea14c3c68e144fa4028531c971ed1c0a81f499c2dff95866d6f02f2bc382c382a88fa9ac59a64a8714c7a306b20d91c78b30125dba2ceb7a58e1672eaa7884031b59ce4951b0f6ba8b215124e25766e96bc9a4a48c29a3c9c3ae321a92fb514f8c33506ab7083c9ba31ecf791b1cc1bf2ef64d6049aa392d2db7b23a2abc96538d2b720d84fbc6480fdd9e45bca7a6771a9c16b687901e4fd7b5da8fd16f3b70e5658c3b39d1f4d9e350d9f50a6c04b16e18eb290f3c246cbbab6cdf9bbfb30370b3e7288dfac3a48baa489f97e89ad0541b6c459fd6ba0ce10fd158366d1753117c03e9f996793d10384206e2ffb71c3c2329c03d2febdeaa1870c24a9f18c4dde1b3272186c1cb7424790cbaecde43fbccf53c5cb5db87e7d8600c09c7acab8d5ac5f7eee6552262a1b62276146f3c8d26ecf021d26da6ab874d55f51e17f9bed84502228537dfc572f79951c80dbf5159760cfa4"})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x3, 0x14, "5da5eed576debcd09599a3cdb4a7881a838e00"}) (async)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0)
write$binfmt_aout(r8, &(0x7f0000000500)={{0x107, 0x90, 0x2, 0x11e, 0x19e, 0x3ff, 0x1fd, 0x1}, "1251f2810c52597c885dc1a0b7d1db901297ffae777b52769a900e24a369efd535d91639ae1102eda4876f8bec3008253924fccbd3a6e5eedf60cb6e2f2c0530924a9283b5b95364c1d9a8e587e131378d73c72e09099fab28ee4151a634ae8d1584786d558f7c41510041139f3c077bfcd1f569d3c08297ac17c159ecbdd52354642c1fd8a493a4904ac15dd7d50e0f9258c0348c251ec180c0e68db011575c03a79e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c3) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9) (async)

15:10:42 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:43 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000000c0)={0x4, 0xf, &(0x7f0000000140)})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0) (async, rerun: 64)
r5 = syz_usbip_server_init(0x2) (rerun: 64)
dup3(r5, r4, 0x80000) (async)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x7) (async, rerun: 64)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (rerun: 64)

15:10:43 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x2, 0x0, 0x2, 0x0, "4389c801000000000000000500"})

15:10:43 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9)

15:10:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r3], 0xff32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000004c0)) (async)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000d40)) (async, rerun: 32)
r5 = dup3(r4, r0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xee00}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000003c0)={{0x2, 0x0, 0x7, 0x0, 0x5}, 0x5, 0x4b, 'id0\x00', 'timer0\x00', 0x0, 0x10000, 0x9, 0xfffffffffffffffd, 0x7}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRESHEX=r6, @ANYRESOCT=r7]) (async)
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000d80)={0x1f, "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"}) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x800, 0x9, 0x5, 0x3, 0x14, "5da5eed576debcd09599a3cdb4a7881a838e00"}) (async)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0)
write$binfmt_aout(r8, &(0x7f0000000500)={{0x107, 0x90, 0x2, 0x11e, 0x19e, 0x3ff, 0x1fd, 0x1}, "1251f2810c52597c885dc1a0b7d1db901297ffae777b52769a900e24a369efd535d91639ae1102eda4876f8bec3008253924fccbd3a6e5eedf60cb6e2f2c0530924a9283b5b95364c1d9a8e587e131378d73c72e09099fab28ee4151a634ae8d1584786d558f7c41510041139f3c077bfcd1f569d3c08297ac17c159ecbdd52354642c1fd8a493a4904ac15dd7d50e0f9258c0348c251ec180c0e68db011575c03a79e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c3) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:43 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfd, "3c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x90002018})

[  546.494626][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  546.501156][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.508739][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.516476][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(20)
[  546.523085][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.530802][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.544510][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(22)
[  546.551164][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.558777][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.618394][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(24)
[  546.625014][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.632688][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.657231][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(26)
15:10:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

[  546.663843][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.671485][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.679930][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(28)
[  546.686610][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.694712][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.721967][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(30)
[  546.728596][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.736215][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.756972][T31324] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(32)
[  546.763595][T31324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  546.771183][T31324] vhci_hcd vhci_hcd.0: Device attached
[  546.777924][T31324] vhci_hcd vhci_hcd.0: port 0 already used
15:10:43 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:43 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x2, 0x0, 0x2, 0x0, "4389c801000000000000000500"})

15:10:44 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2, 0x200, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

[  547.271083][T31330] vhci_hcd: connection closed
[  547.271281][T31332] vhci_hcd: connection closed
[  547.276178][ T5957] vhci_hcd: stop threads
[  547.276223][T31338] vhci_hcd: connection closed
[  547.280885][ T5957] vhci_hcd: release socket
[  547.285376][T31350] vhci_hcd: connection closed
[  547.289805][ T5957] vhci_hcd: disconnect device
[  547.303763][T31352] vhci_hcd: connection closed
[  547.303943][T31355] vhci_hcd: connection closed
[  547.305679][ T5957] vhci_hcd: stop threads
[  547.317574][ T5957] vhci_hcd: release socket
[  547.321997][ T5957] vhci_hcd: disconnect device
[  547.330274][ T5957] vhci_hcd: stop threads
[  547.334534][ T5957] vhci_hcd: release socket
[  547.338967][ T5957] vhci_hcd: disconnect device
[  547.344002][ T5957] vhci_hcd: stop threads
[  547.348301][ T5957] vhci_hcd: release socket
[  547.352712][ T5957] vhci_hcd: disconnect device
[  547.357715][ T5957] vhci_hcd: stop threads
[  547.362049][ T5957] vhci_hcd: release socket
[  547.366503][ T5957] vhci_hcd: disconnect device
15:10:44 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = epoll_create1(0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfd, "3c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x90002018})

[  547.371707][ T5957] vhci_hcd: stop threads
[  547.376020][ T5957] vhci_hcd: release socket
[  547.380462][ T5957] vhci_hcd: disconnect device
15:10:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:44 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

[  547.780562][T31361] vhci_hcd: connection closed
[  547.780636][T31359] vhci_hcd: connection closed
[  547.789931][ T5953] vhci_hcd: stop threads
[  547.798996][ T5953] vhci_hcd: release socket
[  547.803404][ T5953] vhci_hcd: disconnect device
[  547.812562][ T5953] vhci_hcd: stop threads
[  547.816888][ T5953] vhci_hcd: release socket
[  547.821383][ T5953] vhci_hcd: disconnect device
15:10:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
dup(r1)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:44 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:44 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0) (rerun: 64)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:44 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2, 0x200, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2, 0x200, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:44 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfd, "3c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x90002018})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfd, "3c81fcf76000"}) (async)
syz_open_pts(r4, 0x0) (async)
dup3(r5, r4, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x90002018}) (async)

15:10:45 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2, 0x200, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2, 0x200, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:45 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
dup(r1) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x400003, 0x0, 0x7ffffffd, 0xf, "47da10000020000000007d95c15c00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:45 executing program 5:
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={<r0=>0x0, 0x9}, &(0x7f00000000c0)=0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r1, 0x2000)
r3 = dup3(r2, r1, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000480), 0x87, 0x1cd243)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000004c0)={0x4, 0x400, 0x2, 0x8, 0xa, "67408e29138330e1f083af958c2125f85c8c69"})
syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000800000000002e2fc7b16c653500"])
r7 = socket$kcm(0x29, 0x5, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0)
syz_io_uring_setup(0x396f, &(0x7f0000000280)={0x0, 0x8ded, 0x4, 0x2, 0x242, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)=<r8=>0x0)
syz_io_uring_submit(r5, r8, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x20)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={<r10=>r0, 0x2, 0x20}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000240)={r10}, 0x8)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0xff)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140))

15:10:45 executing program 5:
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={<r0=>0x0, 0x9}, &(0x7f00000000c0)=0x8) (async, rerun: 32)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 32)
r2 = syz_open_pts(r1, 0x2000) (rerun: 32)
r3 = dup3(r2, r1, 0x0) (async)
r4 = syz_open_dev$vcsn(&(0x7f0000000480), 0x87, 0x1cd243)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000004c0)={0x4, 0x400, 0x2, 0x8, 0xa, "67408e29138330e1f083af958c2125f85c8c69"}) (async)
syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0) (async)
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000400)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000800000000002e2fc7b16c653500"]) (async, rerun: 64)
r7 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x396f, &(0x7f0000000280)={0x0, 0x8ded, 0x4, 0x2, 0x242, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)=<r8=>0x0) (rerun: 64)
syz_io_uring_submit(r5, r8, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x20) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={<r10=>r0, 0x2, 0x20}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000240)={r10}, 0x8) (async)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0xff) (async)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140))

15:10:45 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

[  548.547623][   T24] audit: type=1400 audit(1642605045.224:470): avc:  denied  { sqpoll } for  pid=31440 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
15:10:45 executing program 5:
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={<r0=>0x0, 0x9}, &(0x7f00000000c0)=0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r1, 0x2000)
r3 = dup3(r2, r1, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000480), 0x87, 0x1cd243)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000004c0)={0x4, 0x400, 0x2, 0x8, 0xa, "67408e29138330e1f083af958c2125f85c8c69"})
syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000800000000002e2fc7b16c653500"])
r7 = socket$kcm(0x29, 0x5, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0)
syz_io_uring_setup(0x396f, &(0x7f0000000280)={0x0, 0x8ded, 0x4, 0x2, 0x242, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)=<r8=>0x0)
syz_io_uring_submit(r5, r8, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x20)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={<r10=>r0, 0x2, 0x20}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000240)={r10}, 0x8)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0xff)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r1, 0x2000) (async)
dup3(r2, r1, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000480), 0x87, 0x1cd243) (async)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000004c0)={0x4, 0x400, 0x2, 0x8, 0xa, "67408e29138330e1f083af958c2125f85c8c69"}) (async)
syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000080)) (async)
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000400)) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000800000000002e2fc7b16c653500"]) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) (async)
syz_io_uring_setup(0x396f, &(0x7f0000000280)={0x0, 0x8ded, 0x4, 0x2, 0x242, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async)
syz_io_uring_submit(r5, r8, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x20) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r0, 0x2, 0x20}, &(0x7f0000000200)=0xc) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000240)={r10}, 0x8) (async)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0xff) (async)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000140)) (async)

15:10:45 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:45 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x200, 0x100, 0x36e, 0x80000001, 0x16, "790de9e3c231605cff071e1f26299033b1d9ad"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x800000, 0x0, 0x0, 0x0, "00407a90847088d93c0000fdea893b00"})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000180))
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)

15:10:45 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:10:45 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:45 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:45 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:10:45 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async, rerun: 32)
r1 = epoll_create1(0x0) (async, rerun: 32)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r3 = syz_open_pts(r2, 0x0) (rerun: 32)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
dup(r1)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x400003, 0x0, 0x7ffffffd, 0xf, "47da10000020000000007d95c15c00"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a)
dup3(r1, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6)

15:10:46 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:10:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffe, 0x2, 0x7, 0x801, 0x12, "00406b92000000ab56d0c7f080500a1c000021"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:46 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:10:46 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:46 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x200, 0x100, 0x36e, 0x80000001, 0x16, "790de9e3c231605cff071e1f26299033b1d9ad"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x800000, 0x0, 0x0, 0x0, "00407a90847088d93c0000fdea893b00"}) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1) (async)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async, rerun: 64)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 64)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000180)) (rerun: 64)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)

15:10:46 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a)
dup3(r1, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) (async)

15:10:46 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a)
dup3(r1, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1a) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) (async)

15:10:46 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x400003, 0x0, 0x7ffffffd, 0xf, "47da10000020000000007d95c15c00"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffe, 0x2, 0x7, 0x801, 0x12, "00406b92000000ab56d0c7f080500a1c000021"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffe, 0x2, 0x7, 0x801, 0x12, "00406b92000000ab56d0c7f080500a1c000021"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7ff, 0xfffffffe, 0x80, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:47 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:47 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x200, 0x100, 0x36e, 0x80000001, 0x16, "790de9e3c231605cff071e1f26299033b1d9ad"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x800000, 0x0, 0x0, 0x0, "00407a90847088d93c0000fdea893b00"})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000180))
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x200, 0x100, 0x36e, 0x80000001, 0x16, "790de9e3c231605cff071e1f26299033b1d9ad"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x800000, 0x0, 0x0, 0x0, "00407a90847088d93c0000fdea893b00"}) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000180)) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
ioctl$VT_DISALLOCATE(r3, 0x5608) (async)

15:10:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7ff, 0xfffffffe, 0x80, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:47 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x5, 0x9, 0x513749ee, 0x15, "2a3dd6c6a83853fe8b6a4b5edbc00acd07587e"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:47 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = epoll_create1(0x0)
close_range(r0, r0, 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
recvmsg$qrtr(r4, &(0x7f0000002900)={&(0x7f0000000080), 0xc, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/196, 0xc4}, {&(0x7f0000001200)=""/44, 0x2c}], 0x3, &(0x7f0000001280)=[{0x68, 0x0, 0x0, ""/83}, {0xc0, 0x0, 0x0, ""/171}, {0xc0, 0x0, 0x0, ""/169}, {0x1010, 0x0, 0x0, ""/4096}, {0xe0, 0x0, 0x0, ""/207}, {0x88, 0x0, 0x0, ""/118}, {0x90, 0x0, 0x0, ""/127}, {0x110, 0x0, 0x0, ""/255}, {0xf0, 0x0, 0x0, ""/224}, {0x70, 0x0, 0x0, ""/95}], 0x1660, 0x60000000}, 0x38, 0x40002060)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:47 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7ff, 0xfffffffe, 0x80, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:47 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:47 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0xa5, 0x0, 0x4, 0x0, 0x0, [{{r2}, 0xb31}, {{r3}}, {{r1}, 0x286a}, {{r0}, 0x7}]})
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffe, 0x2, 0x7, 0x801, 0x12, "00406b92000000ab56d0c7f080500a1c000021"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:47 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'}) (async)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0xa5, 0x0, 0x4, 0x0, 0x0, [{{r2}, 0xb31}, {{r3}}, {{r1}, 0x286a}, {{r0}, 0x7}]}) (async)
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:48 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:48 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
r1 = epoll_create1(0x0) (async)
close_range(r0, r0, 0x2) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
recvmsg$qrtr(r4, &(0x7f0000002900)={&(0x7f0000000080), 0xc, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/196, 0xc4}, {&(0x7f0000001200)=""/44, 0x2c}], 0x3, &(0x7f0000001280)=[{0x68, 0x0, 0x0, ""/83}, {0xc0, 0x0, 0x0, ""/171}, {0xc0, 0x0, 0x0, ""/169}, {0x1010, 0x0, 0x0, ""/4096}, {0xe0, 0x0, 0x0, ""/207}, {0x88, 0x0, 0x0, ""/118}, {0x90, 0x0, 0x0, ""/127}, {0x110, 0x0, 0x0, ""/255}, {0xf0, 0x0, 0x0, ""/224}, {0x70, 0x0, 0x0, ""/95}], 0x1660, 0x60000000}, 0x38, 0x40002060)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:48 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x5, 0x9, 0x513749ee, 0x15, "2a3dd6c6a83853fe8b6a4b5edbc00acd07587e"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:48 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x8000, 0x14)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x3, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:48 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x5, 0x9, 0x513749ee, 0x15, "2a3dd6c6a83853fe8b6a4b5edbc00acd07587e"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:48 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:48 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {r1}}, './file0\x00'})
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0xa5, 0x0, 0x4, 0x0, 0x0, [{{r2}, 0xb31}, {{r3}}, {{r1}, 0x286a}, {{r0}, 0x7}]})
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0xa5, 0x0, 0x4, 0x0, 0x0, [{{r2}, 0xb31}, {{r3}}, {{r1}, 0x286a}, {{r0}, 0x7}]}) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef) (async)

15:10:48 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:48 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000))

15:10:48 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0) (async)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000))

15:10:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000140)="85141486752d265f1cf2019133e8bde9272a57cde2323c648d847d55f4f3fbda853e69c1d7f9c115ee5e3ee87c50a30a226402b3a6dd571121a434481a255bfe3cdfa913762b942fda09612e7f829c6a2955b54a709c0e6c6bcd710a0050c7d9ff997525033622049cf00f50f2fc214abf3c0fa868dc9132f3a2669b85edee2851f8163e8d11e9cf8efe2536c8dff0e8a3bf7bf693065da094f1f6045f93a4c1900251b443f4cb89b28ae450c1e8b1d38d0d667812a1411d2482f69becd58b755cf77bab323e669818ea8d24b6cacb99b584e10e88581faf6d83e0e0b7e3bcbaeab0f05e004bb974a20e07adac5d", 0xee, 0x9, 0x0, 0x1, r6}])

15:10:49 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
r1 = epoll_create1(0x0) (async)
close_range(r0, r0, 0x2) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
recvmsg$qrtr(r4, &(0x7f0000002900)={&(0x7f0000000080), 0xc, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/196, 0xc4}, {&(0x7f0000001200)=""/44, 0x2c}], 0x3, &(0x7f0000001280)=[{0x68, 0x0, 0x0, ""/83}, {0xc0, 0x0, 0x0, ""/171}, {0xc0, 0x0, 0x0, ""/169}, {0x1010, 0x0, 0x0, ""/4096}, {0xe0, 0x0, 0x0, ""/207}, {0x88, 0x0, 0x0, ""/118}, {0x90, 0x0, 0x0, ""/127}, {0x110, 0x0, 0x0, ""/255}, {0xf0, 0x0, 0x0, ""/224}, {0x70, 0x0, 0x0, ""/95}], 0x1660, 0x60000000}, 0x38, 0x40002060)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:49 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) (rerun: 32)

15:10:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_pts(r1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x8000, 0x14)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x3, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r1, 0x5608)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x80000001, 0x0, 0x2, 0x3, "bb9ed6748c3cce0689c8ebd58a5d0000000020"})

15:10:49 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_pts(r1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
syz_open_pts(r1, 0x0) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)

15:10:49 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000140)="85141486752d265f1cf2019133e8bde9272a57cde2323c648d847d55f4f3fbda853e69c1d7f9c115ee5e3ee87c50a30a226402b3a6dd571121a434481a255bfe3cdfa913762b942fda09612e7f829c6a2955b54a709c0e6c6bcd710a0050c7d9ff997525033622049cf00f50f2fc214abf3c0fa868dc9132f3a2669b85edee2851f8163e8d11e9cf8efe2536c8dff0e8a3bf7bf693065da094f1f6045f93a4c1900251b443f4cb89b28ae450c1e8b1d38d0d667812a1411d2482f69becd58b755cf77bab323e669818ea8d24b6cacb99b584e10e88581faf6d83e0e0b7e3bcbaeab0f05e004bb974a20e07adac5d", 0xee, 0x9, 0x0, 0x1, r6}])

15:10:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_pts(r1, 0x0) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:49 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:49 executing program 1:
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="5392931341741e8846fec0ea604caa7141a96b87a8fa3d81c7600b81d67dd65bf56224d440c09afc953d1abaf8b91353bfb9f3876e14b5dd33a23589269367d5597baf863fce0d3c0227757977d8499dbc0a3ebcecd3b3b7e9dc11570a784e7dd861c6781abddeed81edcd602972ad51649cbf6bf3442122dc79d0edf0d8c4fe425d21de37bd2e1ccb92f0bf123f2ac2454500324b23518fffbf9f2ea7c985c9d1ffeba3e724f0c1eba5704035d0", 0xae}, {&(0x7f00000001c0)="c83eadc9d557bded435264e0be40ffa985e75b4204d18f862e323c397e9f86efc6a683bfb005964c4407fc8bdf63e5ff5cbab41da902e511e519975b5389127f1d7f29144b13eb5071137aeb8cde609baff7f22d261f8a3b00f13cea08d0897956741eaabb4686adbb7c77ba6816916339e6bd08ce2542351b99daef6b32338afb2cfaa4d32194047ac9175dda33596683e4df1d224ca89d819ade49c514cbfb5c6380be96180c783ec9b6265522393d4d", 0xb1}, {&(0x7f0000000280)="25124ae9ede4810970fcf832ca0b87ae3a1eed8d6418f50fefef589ced16a9dd43e628204fbb157054048354be0b310930e5699608eaf8a7cbb9d3a2a6b4d0b3263403441e3b9a636c8f5bb82d88579d873d3e02be8ed7ca28de7b5aca1e641a13eca0412a25473d8ae757fb295a3859c5d39c581985e4e2e1f3e02a7fa6917b3a1cd1364c824f46f5a3d2522c06f8b255fd89906e8f0c3c7a23ca89589df3286a2c004ae6ece642e15a2177e3e71b007cd8100c2b495788b4aed33e0b6bdff27a93303d9decd9276ef4aa1bcc6689cf65b261a49105a7cf9bfd477d2aca", 0xde}], 0x3)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getpeername(r1, &(0x7f0000000380)=@x25, &(0x7f0000000400)=0x80)

[  553.417353][   T24] audit: type=1400 audit(1642605050.094:471): avc:  denied  { create } for  pid=31732 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
15:10:50 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10, 0x80800)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x2)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x8000, 0x14)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x3, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x8000, 0x14) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x3, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:50 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x30, r1, 0x7a9ed000)
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa)

15:10:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140))
syz_open_pts(r5, 0x402100)
r6 = syz_open_pts(r3, 0x0)
r7 = dup3(r6, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000140))
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x4, 0x401, 0x7, 0xfffffffe, 0x1a, "59dfd3f3ca79074bcd78ebc6c83c0231e334f8"})
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:50 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCXONC(r4, 0x540a, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x100)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f00000000c0))
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000180)={0xb9b, 0x40, 0x9, 0xff, 0x81, "d1d98cc89f47ddaa42ca152a5061763b61a25a", 0xffff, 0x1})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x17)
r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0)
fsmount(r8, 0x1, 0xf0)

15:10:50 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000140)="85141486752d265f1cf2019133e8bde9272a57cde2323c648d847d55f4f3fbda853e69c1d7f9c115ee5e3ee87c50a30a226402b3a6dd571121a434481a255bfe3cdfa913762b942fda09612e7f829c6a2955b54a709c0e6c6bcd710a0050c7d9ff997525033622049cf00f50f2fc214abf3c0fa868dc9132f3a2669b85edee2851f8163e8d11e9cf8efe2536c8dff0e8a3bf7bf693065da094f1f6045f93a4c1900251b443f4cb89b28ae450c1e8b1d38d0d667812a1411d2482f69becd58b755cf77bab323e669818ea8d24b6cacb99b584e10e88581faf6d83e0e0b7e3bcbaeab0f05e004bb974a20e07adac5d", 0xee, 0x9, 0x0, 0x1, r6}])

15:10:50 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:50 executing program 1:
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="5392931341741e8846fec0ea604caa7141a96b87a8fa3d81c7600b81d67dd65bf56224d440c09afc953d1abaf8b91353bfb9f3876e14b5dd33a23589269367d5597baf863fce0d3c0227757977d8499dbc0a3ebcecd3b3b7e9dc11570a784e7dd861c6781abddeed81edcd602972ad51649cbf6bf3442122dc79d0edf0d8c4fe425d21de37bd2e1ccb92f0bf123f2ac2454500324b23518fffbf9f2ea7c985c9d1ffeba3e724f0c1eba5704035d0", 0xae}, {&(0x7f00000001c0)="c83eadc9d557bded435264e0be40ffa985e75b4204d18f862e323c397e9f86efc6a683bfb005964c4407fc8bdf63e5ff5cbab41da902e511e519975b5389127f1d7f29144b13eb5071137aeb8cde609baff7f22d261f8a3b00f13cea08d0897956741eaabb4686adbb7c77ba6816916339e6bd08ce2542351b99daef6b32338afb2cfaa4d32194047ac9175dda33596683e4df1d224ca89d819ade49c514cbfb5c6380be96180c783ec9b6265522393d4d", 0xb1}, {&(0x7f0000000280)="25124ae9ede4810970fcf832ca0b87ae3a1eed8d6418f50fefef589ced16a9dd43e628204fbb157054048354be0b310930e5699608eaf8a7cbb9d3a2a6b4d0b3263403441e3b9a636c8f5bb82d88579d873d3e02be8ed7ca28de7b5aca1e641a13eca0412a25473d8ae757fb295a3859c5d39c581985e4e2e1f3e02a7fa6917b3a1cd1364c824f46f5a3d2522c06f8b255fd89906e8f0c3c7a23ca89589df3286a2c004ae6ece642e15a2177e3e71b007cd8100c2b495788b4aed33e0b6bdff27a93303d9decd9276ef4aa1bcc6689cf65b261a49105a7cf9bfd477d2aca", 0xde}], 0x3) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getpeername(r1, &(0x7f0000000380)=@x25, &(0x7f0000000400)=0x80)

15:10:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xb, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000000), 0x7)

15:10:51 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$TCXONC(r4, 0x540a, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x100)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f00000000c0))
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0) (async)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000180)={0xb9b, 0x40, 0x9, 0xff, 0x81, "d1d98cc89f47ddaa42ca152a5061763b61a25a", 0xffff, 0x1}) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x17) (async)
r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0)
fsmount(r8, 0x1, 0xf0)

15:10:51 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(0xffffffffffffffff, 0x0)
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) (async)
syz_open_pts(r5, 0x402100) (async)
r6 = syz_open_pts(r3, 0x0)
r7 = dup3(r6, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000140))
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x4, 0x401, 0x7, 0xfffffffe, 0x1a, "59dfd3f3ca79074bcd78ebc6c83c0231e334f8"}) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
write(r2, &(0x7f0000000000)="28fc3f2c006aec9df6", 0x9)
r6 = dup3(r1, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:10:51 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xb, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000000), 0x7)

15:10:51 executing program 1:
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="5392931341741e8846fec0ea604caa7141a96b87a8fa3d81c7600b81d67dd65bf56224d440c09afc953d1abaf8b91353bfb9f3876e14b5dd33a23589269367d5597baf863fce0d3c0227757977d8499dbc0a3ebcecd3b3b7e9dc11570a784e7dd861c6781abddeed81edcd602972ad51649cbf6bf3442122dc79d0edf0d8c4fe425d21de37bd2e1ccb92f0bf123f2ac2454500324b23518fffbf9f2ea7c985c9d1ffeba3e724f0c1eba5704035d0", 0xae}, {&(0x7f00000001c0)="c83eadc9d557bded435264e0be40ffa985e75b4204d18f862e323c397e9f86efc6a683bfb005964c4407fc8bdf63e5ff5cbab41da902e511e519975b5389127f1d7f29144b13eb5071137aeb8cde609baff7f22d261f8a3b00f13cea08d0897956741eaabb4686adbb7c77ba6816916339e6bd08ce2542351b99daef6b32338afb2cfaa4d32194047ac9175dda33596683e4df1d224ca89d819ade49c514cbfb5c6380be96180c783ec9b6265522393d4d", 0xb1}, {&(0x7f0000000280)="25124ae9ede4810970fcf832ca0b87ae3a1eed8d6418f50fefef589ced16a9dd43e628204fbb157054048354be0b310930e5699608eaf8a7cbb9d3a2a6b4d0b3263403441e3b9a636c8f5bb82d88579d873d3e02be8ed7ca28de7b5aca1e641a13eca0412a25473d8ae757fb295a3859c5d39c581985e4e2e1f3e02a7fa6917b3a1cd1364c824f46f5a3d2522c06f8b255fd89906e8f0c3c7a23ca89589df3286a2c004ae6ece642e15a2177e3e71b007cd8100c2b495788b4aed33e0b6bdff27a93303d9decd9276ef4aa1bcc6689cf65b261a49105a7cf9bfd477d2aca", 0xde}], 0x3) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getpeername(r1, &(0x7f0000000380)=@x25, &(0x7f0000000400)=0x80)

15:10:51 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (rerun: 64)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = epoll_create1(0x0) (async, rerun: 32)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
write(r2, &(0x7f0000000000)="28fc3f2c006aec9df6", 0x9)
r6 = dup3(r1, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCXONC(r4, 0x540a, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x100)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f00000000c0)) (async, rerun: 32)
r6 = syz_open_pts(r0, 0x0) (rerun: 32)
r7 = dup3(r6, r0, 0x0)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000180)={0xb9b, 0x40, 0x9, 0xff, 0x81, "d1d98cc89f47ddaa42ca152a5061763b61a25a", 0xffff, 0x1}) (async)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x17) (async)
r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0)
fsmount(r8, 0x1, 0xf0)

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (rerun: 32)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r4 = syz_open_pts(0xffffffffffffffff, 0x0) (rerun: 32)
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) (async)
syz_open_pts(r5, 0x402100) (async)
r6 = syz_open_pts(r3, 0x0)
r7 = dup3(r6, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000140)) (async)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x4, 0x401, 0x7, 0xfffffffe, 0x1a, "59dfd3f3ca79074bcd78ebc6c83c0231e334f8"}) (async, rerun: 32)
dup3(r1, r0, 0x0) (rerun: 32)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f00000000c0)={0xb0000001})

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x3, 0x800, 0x6, 0x7, 0x0, "1f11ae2243af118f7584bd922119cb55d9e2a9"})

15:10:52 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
write(r2, &(0x7f0000000000)="28fc3f2c006aec9df6", 0x9)
r6 = dup3(r1, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:10:52 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x40800)
r2 = dup3(r1, r0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x28000)
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140))
r5 = epoll_create1(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4240, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x10000, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140))
r9 = syz_io_uring_setup(0x4a9e, &(0x7f0000000080)={0x0, 0x2f5c, 0x0, 0x3, 0x31a, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x42}, {0xffffffffffffffff, 0x300}, {r5, 0x2a0}, {r1, 0x100}, {r9, 0x4}, {r7, 0x3028}, {r0}], 0x7, &(0x7f0000000200), &(0x7f0000000240)={[0x54ee]}, 0x8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:10:52 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 1)

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

[  556.079503][T31868] FAULT_INJECTION: forcing a failure.
[  556.079503][T31868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.092654][T31868] CPU: 1 PID: 31868 Comm: syz-executor.3 Not tainted 5.16.0-syzkaller #0
[  556.101142][T31868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  556.111239][T31868] Call Trace:
[  556.114547][T31868]  <TASK>
[  556.117500][T31868]  dump_stack_lvl+0xd6/0x122
[  556.122136][T31868]  dump_stack+0x11/0x1b
[  556.126290][T31868]  should_fail+0x23c/0x250
[  556.130746][T31868]  should_fail_usercopy+0x16/0x20
[  556.135831][T31868]  _copy_to_user+0x1c/0x90
[  556.140272][T31868]  simple_read_from_buffer+0xab/0x120
[  556.145719][T31868]  proc_fail_nth_read+0x10d/0x150
[  556.150751][T31868]  ? proc_fault_inject_write+0x230/0x230
[  556.156459][T31868]  vfs_read+0x1e6/0x750
[  556.160629][T31868]  ? __fget_files+0x1d2/0x210
[  556.165344][T31868]  ksys_read+0xd9/0x190
[  556.169574][T31868]  __x64_sys_read+0x3e/0x50
[  556.174132][T31868]  do_syscall_64+0x44/0xd0
[  556.178547][T31868]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  556.184480][T31868] RIP: 0033:0x7f1f10572b9c
[  556.188888][T31868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  556.208495][T31868] RSP: 002b:00007f1f0f715160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  556.216907][T31868] RAX: ffffffffffffffda RBX: 00007f1f106d3030 RCX: 00007f1f10572b9c
15:10:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000140)={0x339, 0x8000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:52 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

[  556.225052][T31868] RDX: 000000000000000f RSI: 00007f1f0f7151e0 RDI: 0000000000000005
[  556.233027][T31868] RBP: 00007f1f0f7151d0 R08: 0000000000000000 R09: 0000000000000000
[  556.241168][T31868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.249137][T31868] R13: 00007fff5d80bf9f R14: 00007f1f0f715300 R15: 0000000000022000
[  556.257113][T31868]  </TASK>
15:10:53 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:53 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x3, 0x800, 0x6, 0x7, 0x0, "1f11ae2243af118f7584bd922119cb55d9e2a9"})

15:10:53 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x5a9, 0xffff, 0x10000, 0x3ff, 0x11, "cd3b1a78cd0f351de0927fe3886dfce7e47ade"})
r3 = syz_open_pts(r0, 0x0)
r4 = dup3(r3, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0) (rerun: 64)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000140)={0x339, 0x8000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

15:10:53 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8) (fail_nth: 1)

[  556.952540][T31903] FAULT_INJECTION: forcing a failure.
[  556.952540][T31903] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.965679][T31903] CPU: 0 PID: 31903 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0
[  556.974101][T31903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  556.984167][T31903] Call Trace:
[  556.987442][T31903]  <TASK>
[  556.990372][T31903]  dump_stack_lvl+0xd6/0x122
[  556.995044][T31903]  dump_stack+0x11/0x1b
[  556.999205][T31903]  should_fail+0x23c/0x250
[  557.003632][T31903]  should_fail_usercopy+0x16/0x20
[  557.008699][T31903]  _copy_to_iter+0x131/0xc60
[  557.013386][T31903]  ? check_stack_object+0x43/0x70
[  557.018416][T31903]  ? __check_object_size+0x22a/0x2d0
[  557.023771][T31903]  tty_read+0x200/0x430
[  557.027928][T31903]  vfs_read+0x66c/0x750
[  557.032088][T31903]  ksys_read+0xd9/0x190
[  557.036305][T31903]  __x64_sys_read+0x3e/0x50
[  557.040812][T31903]  do_syscall_64+0x44/0xd0
[  557.045225][T31903]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  557.051279][T31903] RIP: 0033:0x7f7da07e9fe9
[  557.055688][T31903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  557.075416][T31903] RSP: 002b:00007f7d9f93f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  557.083825][T31903] RAX: ffffffffffffffda RBX: 00007f7da08fd030 RCX: 00007f7da07e9fe9
[  557.091798][T31903] RDX: 0000000000000008 RSI: 0000000020000040 RDI: 0000000000000005
15:10:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0) (rerun: 64)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000140)={0x339, 0x8000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

[  557.099845][T31903] RBP: 00007f7d9f93f1d0 R08: 0000000000000000 R09: 0000000000000000
[  557.107812][T31903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.115779][T31903] R13: 00007ffde36486cf R14: 00007f7d9f93f300 R15: 0000000000022000
[  557.123750][T31903]  </TASK>
15:10:53 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000000))

15:10:53 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x9)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x3, 0x800, 0x6, 0x7, 0x0, "1f11ae2243af118f7584bd922119cb55d9e2a9"})

15:10:54 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8) (fail_nth: 2)

15:10:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x5a9, 0xffff, 0x10000, 0x3ff, 0x11, "cd3b1a78cd0f351de0927fe3886dfce7e47ade"})
r3 = syz_open_pts(r0, 0x0)
r4 = dup3(r3, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

[  557.803968][T31932] FAULT_INJECTION: forcing a failure.
[  557.803968][T31932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  557.817193][T31932] CPU: 0 PID: 31932 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0
[  557.825780][T31932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  557.835919][T31932] Call Trace:
[  557.839193][T31932]  <TASK>
[  557.842117][T31932]  dump_stack_lvl+0xd6/0x122
[  557.846717][T31932]  dump_stack+0x11/0x1b
[  557.850884][T31932]  should_fail+0x23c/0x250
[  557.855296][T31932]  should_fail_usercopy+0x16/0x20
[  557.860397][T31932]  _copy_to_user+0x1c/0x90
[  557.864838][T31932]  simple_read_from_buffer+0xab/0x120
[  557.870208][T31932]  proc_fail_nth_read+0x10d/0x150
[  557.875324][T31932]  ? proc_fault_inject_write+0x230/0x230
[  557.880953][T31932]  vfs_read+0x1e6/0x750
[  557.885107][T31932]  ? __fget_files+0x1d2/0x210
[  557.889859][T31932]  ksys_read+0xd9/0x190
[  557.894062][T31932]  __x64_sys_read+0x3e/0x50
[  557.898623][T31932]  do_syscall_64+0x44/0xd0
[  557.903036][T31932]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  557.908949][T31932] RIP: 0033:0x7f7da079cb9c
[  557.913358][T31932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  557.932967][T31932] RSP: 002b:00007f7d9f93f160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  557.941419][T31932] RAX: ffffffffffffffda RBX: 00007f7da08fd030 RCX: 00007f7da079cb9c
15:10:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x5a9, 0xffff, 0x10000, 0x3ff, 0x11, "cd3b1a78cd0f351de0927fe3886dfce7e47ade"}) (async)
r3 = syz_open_pts(r0, 0x0)
r4 = dup3(r3, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:10:54 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x4b47, &(0x7f0000000000))

[  557.949387][T31932] RDX: 000000000000000f RSI: 00007f7d9f93f1e0 RDI: 0000000000000006
[  557.957425][T31932] RBP: 00007f7d9f93f1d0 R08: 0000000000000000 R09: 0000000000000000
[  557.965401][T31932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.973376][T31932] R13: 00007ffde36486cf R14: 00007f7d9f93f300 R15: 0000000000022000
[  557.981411][T31932]  </TASK>
15:10:54 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:54 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:10:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={<r3=>0x0, 0x8, 0x20}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0x1, 0x20}, 0xc)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x9) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2})
close_range(r1, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xff2e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x3}, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r2, {0x6}}, './file0\x00'})
preadv2(r3, &(0x7f0000000480)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/225, 0xe1}], 0x3, 0xaf, 0x3, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'vxcan1\x00'}})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2})
close_range(r1, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xff2e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x3}, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r2, {0x6}}, './file0\x00'})
preadv2(r3, &(0x7f0000000480)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/225, 0xe1}], 0x3, 0xaf, 0x3, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'vxcan1\x00'}})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xff2e) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x3}, 0x1}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) (async)
preadv2(r3, &(0x7f0000000480)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/225, 0xe1}], 0x3, 0xaf, 0x3, 0x0) (async)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'vxcan1\x00'}}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:10:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2})
close_range(r1, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xff2e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x3}, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r2, {0x6}}, './file0\x00'})
preadv2(r3, &(0x7f0000000480)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/225, 0xe1}], 0x3, 0xaf, 0x3, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'vxcan1\x00'}})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xff2e) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x3}, 0x1}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) (async)
preadv2(r3, &(0x7f0000000480)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/225, 0xe1}], 0x3, 0xaf, 0x3, 0x0) (async)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'vxcan1\x00'}}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:10:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0xa0000)
syz_open_pts(r1, 0x101a00)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:55 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x9)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x9) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40000, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:55 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xee01}}, './file0\x00'})
syz_open_pts(r1, 0x4c003)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r5, r1, 0x8000})
r6 = syz_open_pts(r0, 0x0)
dup3(r6, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)={0x80000008})

15:10:55 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x4b49, &(0x7f0000000000))

15:10:55 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:55 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x24)

15:10:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={<r3=>0x0, 0x8, 0x20}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0x1, 0x20}, 0xc) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={<r3=>0x0, 0x8, 0x20}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0x1, 0x20}, 0xc) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:55 executing program 0:
sigaltstack(&(0x7f0000000200)={&(0x7f0000000140)=""/156, 0x2, 0x9c}, &(0x7f0000001240)={&(0x7f0000000240)=""/4096, 0x0, 0x1000})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
syz_open_pts(r0, 0x40100)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000))
syz_open_pts(r0, 0x0)
r3 = dup3(r0, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:10:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0xa0000)
syz_open_pts(r1, 0x101a00) (async, rerun: 32)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (rerun: 32)

15:10:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xee01}}, './file0\x00'})
syz_open_pts(r1, 0x4c003)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r5, r1, 0x8000})
r6 = syz_open_pts(r0, 0x0)
dup3(r6, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)={0x80000008})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) (async)
syz_open_pts(r1, 0x4c003) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r5, r1, 0x8000}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r6, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)={0x80000008}) (async)

15:10:56 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000000))

15:10:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xee01}}, './file0\x00'})
syz_open_pts(r1, 0x4c003) (async)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000000c0)={r5, r1, 0x8000}) (async)
r6 = syz_open_pts(r0, 0x0)
dup3(r6, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000180)={0x80000008})

15:10:56 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:56 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x41)

15:10:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r1, 0x80000)
readv(r0, &(0x7f0000002400), 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:56 executing program 0:
sigaltstack(&(0x7f0000000200)={&(0x7f0000000140)=""/156, 0x2, 0x9c}, &(0x7f0000001240)={&(0x7f0000000240)=""/4096, 0x0, 0x1000}) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
syz_open_pts(r0, 0x40100)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000))
syz_open_pts(r0, 0x0)
r3 = dup3(r0, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:10:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 32)
r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0xa0000)
syz_open_pts(r1, 0x101a00) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:10:56 executing program 0:
sigaltstack(&(0x7f0000000200)={&(0x7f0000000140)=""/156, 0x2, 0x9c}, &(0x7f0000001240)={&(0x7f0000000240)=""/4096, 0x0, 0x1000})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
syz_open_pts(r0, 0x40100)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000))
syz_open_pts(r0, 0x0)
r3 = dup3(r0, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)
sigaltstack(&(0x7f0000000200)={&(0x7f0000000140)=""/156, 0x2, 0x9c}, &(0x7f0000001240)={&(0x7f0000000240)=""/4096, 0x0, 0x1000}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
syz_open_pts(r0, 0x40100) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r0, r0, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef) (async)

15:10:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r1, 0x80000) (async, rerun: 64)
readv(r0, &(0x7f0000002400), 0x0) (rerun: 64)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x7a1701, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x7a1701, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x7a1701, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:10:57 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540b, &(0x7f0000000000))

15:10:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_dev$vcsu(&(0x7f0000000500), 0x3f, 0x121c00)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0xfffffffc, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80800)
readv(r4, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x4)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r3, 0x0)
r6 = dup3(r5, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000140))
r7 = dup3(r6, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:10:57 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:57 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfdef)

15:10:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r1, 0x80000)
readv(r0, &(0x7f0000002400), 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r1, 0x80000) (async)
readv(r0, &(0x7f0000002400), 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:57 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)

15:10:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_dev$vcsu(&(0x7f0000000500), 0x3f, 0x121c00)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0xfffffffc, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80800)
readv(r4, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x4)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r3, 0x0)
r6 = dup3(r5, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000140))
r7 = dup3(r6, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_dev$vcsu(&(0x7f0000000500), 0x3f, 0x121c00) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0xfffffffc, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80800) (async)
readv(r4, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x4) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r5, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000140)) (async)
dup3(r6, r0, 0x0) (async)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef) (async)

15:10:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000940)=0x81)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x84, 0x16, 0x0, 0x3f, 0x6, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
syz_open_pts(r3, 0xd0fdf2a1d6bbfd90)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e21, 0x1ff, @mcast1, 0xf6d}], 0x1c)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)={0xaf, 0xb, &(0x7f0000000100)="9ef08330df89f817337651d4141c2c356dafb5b62c30daf1bafc3cee05f55297471cfb534d7288533f8491c31a5e1fa4deb8ac8130926124306a1fb4bdd487a28f2cfdd24753d0aacdc227dcc7dedac8fa11cd028f473d00928617983db0e4b57c19dd42079498a4db8235430b55b7edf79cd26116f71661cdef46400143066e8d0c3530f91c54d78603c5957aac86bc92af0640a5660a276febaff6ab45513eff92ce14331a2074a515e36d00d05fc38c3f723fc96b13403b71f4c9acc0aa4adeb1cda1233f630fe0b9a5c5dbbaddc61b54f20bf44b8fd7bf4b867fb930e6f44a66af6eb82322397aa8c89cd69736c39721a22adf1a3e608fe84d1329fc13f00b2c8b6c6b74a27a8c82668d6b6b6e397702c88507d41aa02895455dad03cd772ffeafccaba74074d03231962fbf0d63105081d3554955a227287641e82b086d9ff06d04b775469b36d70d2c67d9667a78b9c40ce526d938b240031d139e9a91424683516308be611e72a1775fc9e674f83849cc330cf55edccaa6c0326ae5784c75282ab441618528cfa611fa36dfe8c19c1136367141cc8ba835be1c766f9b145ca4de711be2bc35bc4c5c581b16cfbd14b48a2aa03e9e36113d73a8c2ef823d852cc23a1c1cb36f7637bf3fe1c3da0380e11f212ed5af0724e23b46345c8a0314e8384f1ff6aa99da78f270163bce646e291df3afd7c40cc17470110f3149018c019ae7c6625aef3f82bfa1888f4f914e5a6fd446b27e22c4766838e0584d7108a4be99b01aa78e774b15c97766226db9db61b2894fb705f5e64af7ad4263d3f4d21e60ca6418dfca9b1ab5e03e338b8d6e78bb0f9353ed46db5212791b046afceaa395dd3d0dae0314173a3fd30740f8fdb0813dfa785e5a60a76cb2612d91f48c963fbc6034e26e8ec11e520fc430f9f758bd166691ef488363e582d96f14be6f5989071c0e8fb385fd9df63e69ace25e3425af1c74434d55890d3cd093e89a57bc1ec34419216c5449c960b0e61f10e742ba507eeaa3b6b63803464f50e738b0db3b76055cb2ccba5ce7cdf1ef390a548e9f5947669548d02437c2553a6132835d3814237dd9f02f754071d2be8973cbca05fa079ecbe3082e7f4cd36d015fef7eaf37569338c889512316a674a2641499092988daf215f70445af6bb0881c289384d4c3ca5fce91bce12d71da85751eb1389f2bf3002dddc416c8d0496017f9d9ed5d8a0fd553d446bd80b393073381f178b07d65a2f460c21a07b60305f0c4a958c2b1caab8ff190667a15717e13c7e2e0945f885d58b076ed26bfaeb49efeaece04b29d68fd74ea3d4bfc5128d9cb547f633fce4f92d0989b378880b03033c23de4113ae6e4c5b553f3b1c9cc31678bc8142121e4c72c86b4aed8fd5c473a9c841bd6a6ba4ac7b16ee32f11edf86ee64c7c429104e88bd6d2576805"})

15:10:57 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)

15:10:57 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)

15:10:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_dev$vcsu(&(0x7f0000000500), 0x3f, 0x121c00)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0xfffffffc, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80800)
readv(r4, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x4)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r3, 0x0)
r6 = dup3(r5, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000140))
r7 = dup3(r6, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_dev$vcsu(&(0x7f0000000500), 0x3f, 0x121c00) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0xfffffffc, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80800) (async)
readv(r4, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x4) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r5, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000140)) (async)
dup3(r6, r0, 0x0) (async)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef) (async)

15:10:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
dup3(r3, r4, 0x80000)
ioctl$TIOCSTI(r2, 0x541b, &(0x7f0000000000))

15:10:58 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540c, &(0x7f0000000000))

15:10:58 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:58 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x20000048)

15:10:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r1})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="4bef1ab14207eed774da6acdef81ea10716816f83a6e0dd58326aa5799cf7f98a3809201c7896e0254bab8518888898319d602e8d3e557501f0345ee24f58c94f8d126797659e765a5b027d3e5c12d8220dfb8c382f12474877f194848f67842997fea926cdd3d84f23a16a30036", 0x6e, 0x8000}, {&(0x7f0000000280)="d489afcc1eba5b2484fa504ed383b9091cba920a15dac8f9be277a9848acbfd9ec38b08e1c37902fc3e3dbcc253dfeff3b46ed", 0x33, 0x6}, {&(0x7f00000002c0)="b3948f85ce75d69f57b5635abd3aacc0408be1f281fbed1676c5efbecb4d6b9688b3f1e5776953d3807126a95254c57fee27a308f06d6f0e745bb6cf78b8dd17375a0814da16b8a66b192d8355aceccf6acd0be77cd8cb265a6086c5d4eb1bc8dcc313154aaf2833b73388b3b799ff55a4e270422834ab9d87f86a09aa6e95c1f2f411d59a6495d25697907d04e27539c5e9f39466effac57d6b79e42e894d3f5eca7dd04b51b4cc686051a93b403a9a354a5d2d64083618d0c62adefac3690913b49845d5a027a366a98ced38f49a5ba89de3d1c9", 0xd5, 0x1}], 0x20048, &(0x7f00000005c0)=ANY=[@ANYBLOB="71756965742c756e695f786c6174653d302c666f776e65723cfc59199b307a9f37a92ae6015fe0b80785dd46f14085e9b298d7313358bc0cd42e2f2700d9713a361309dc0970580fabfa2640fad6aa26891353c71287d7e91d2a0e37723973945d255027d385276d73e60db86faaf43a54ce000c6c8fe00a45b7a882584f4dccc720ad26b27568835306455719eb057b9f88c2b72741169705d3a2d982fbf3a283a9a839a64293af2195abaac5a9180cb94f39e0c970d2e19dbc8b4de52f1353408b4142ca1e99bc2b4b0c9e615668d3150c9cf7718278c94202ad9447990c5f0f2af72161de76c0", @ANYRESDEC, @ANYBLOB=',defcontext=sysadm_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',appraise_type=imasig,context=root,permit_directio,\x00'])
dup3(r0, r4, 0x80000)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:10:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
dup3(r3, r4, 0x80000)
ioctl$TIOCSTI(r2, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) (async)
dup3(r3, r4, 0x80000) (async)
ioctl$TIOCSTI(r2, 0x541b, &(0x7f0000000000)) (async)

[  561.649068][T32199] loop0: detected capacity change from 0 to 128
[  561.705306][ T2257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
15:10:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8)
dup3(r3, r4, 0x80000) (async)
ioctl$TIOCSTI(r2, 0x541b, &(0x7f0000000000))

15:10:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000940)=0x81)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x84, 0x16, 0x0, 0x3f, 0x6, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
syz_open_pts(r3, 0xd0fdf2a1d6bbfd90)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e21, 0x1ff, @mcast1, 0xf6d}], 0x1c)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)={0xaf, 0xb, &(0x7f0000000100)="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"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000940)=0x81) (async)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x84, 0x16, 0x0, 0x3f, 0x6, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
syz_open_pts(r3, 0xd0fdf2a1d6bbfd90) (async)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e21, 0x1ff, @mcast1, 0xf6d}], 0x1c) (async)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)={0xaf, 0xb, &(0x7f0000000100)="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"}) (async)

15:10:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/125)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xa934, 0x3f, 0x7fff, 0xffff, 0x17, "5f9240667fb8bbadf7952000777f75d72af4af"})
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000940)=0x81) (async)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x84, 0x16, 0x0, 0x3f, 0x6, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
syz_open_pts(r3, 0xd0fdf2a1d6bbfd90) (async)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e21, 0x1ff, @mcast1, 0xf6d}], 0x1c) (async)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)={0xaf, 0xb, &(0x7f0000000100)="9ef08330df89f817337651d4141c2c356dafb5b62c30daf1bafc3cee05f55297471cfb534d7288533f8491c31a5e1fa4deb8ac8130926124306a1fb4bdd487a28f2cfdd24753d0aacdc227dcc7dedac8fa11cd028f473d00928617983db0e4b57c19dd42079498a4db8235430b55b7edf79cd26116f71661cdef46400143066e8d0c3530f91c54d78603c5957aac86bc92af0640a5660a276febaff6ab45513eff92ce14331a2074a515e36d00d05fc38c3f723fc96b13403b71f4c9acc0aa4adeb1cda1233f630fe0b9a5c5dbbaddc61b54f20bf44b8fd7bf4b867fb930e6f44a66af6eb82322397aa8c89cd69736c39721a22adf1a3e608fe84d1329fc13f00b2c8b6c6b74a27a8c82668d6b6b6e397702c88507d41aa02895455dad03cd772ffeafccaba74074d03231962fbf0d63105081d3554955a227287641e82b086d9ff06d04b775469b36d70d2c67d9667a78b9c40ce526d938b240031d139e9a91424683516308be611e72a1775fc9e674f83849cc330cf55edccaa6c0326ae5784c75282ab441618528cfa611fa36dfe8c19c1136367141cc8ba835be1c766f9b145ca4de711be2bc35bc4c5c581b16cfbd14b48a2aa03e9e36113d73a8c2ef823d852cc23a1c1cb36f7637bf3fe1c3da0380e11f212ed5af0724e23b46345c8a0314e8384f1ff6aa99da78f270163bce646e291df3afd7c40cc17470110f3149018c019ae7c6625aef3f82bfa1888f4f914e5a6fd446b27e22c4766838e0584d7108a4be99b01aa78e774b15c97766226db9db61b2894fb705f5e64af7ad4263d3f4d21e60ca6418dfca9b1ab5e03e338b8d6e78bb0f9353ed46db5212791b046afceaa395dd3d0dae0314173a3fd30740f8fdb0813dfa785e5a60a76cb2612d91f48c963fbc6034e26e8ec11e520fc430f9f758bd166691ef488363e582d96f14be6f5989071c0e8fb385fd9df63e69ace25e3425af1c74434d55890d3cd093e89a57bc1ec34419216c5449c960b0e61f10e742ba507eeaa3b6b63803464f50e738b0db3b76055cb2ccba5ce7cdf1ef390a548e9f5947669548d02437c2553a6132835d3814237dd9f02f754071d2be8973cbca05fa079ecbe3082e7f4cd36d015fef7eaf37569338c889512316a674a2641499092988daf215f70445af6bb0881c289384d4c3ca5fce91bce12d71da85751eb1389f2bf3002dddc416c8d0496017f9d9ed5d8a0fd553d446bd80b393073381f178b07d65a2f460c21a07b60305f0c4a958c2b1caab8ff190667a15717e13c7e2e0945f885d58b076ed26bfaeb49efeaece04b29d68fd74ea3d4bfc5128d9cb547f633fce4f92d0989b378880b03033c23de4113ae6e4c5b553f3b1c9cc31678bc8142121e4c72c86b4aed8fd5c473a9c841bd6a6ba4ac7b16ee32f11edf86ee64c7c429104e88bd6d2576805"})

15:10:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7e, 0x3, 0x0, 0x3f, 0xfe, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TIOCGPTPEER(r0, 0x5441, 0x20)

15:10:58 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540d, &(0x7f0000000000))

15:10:59 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:59 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x7ffff000)

15:10:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r1})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="4bef1ab14207eed774da6acdef81ea10716816f83a6e0dd58326aa5799cf7f98a3809201c7896e0254bab8518888898319d602e8d3e557501f0345ee24f58c94f8d126797659e765a5b027d3e5c12d8220dfb8c382f12474877f194848f67842997fea926cdd3d84f23a16a30036", 0x6e, 0x8000}, {&(0x7f0000000280)="d489afcc1eba5b2484fa504ed383b9091cba920a15dac8f9be277a9848acbfd9ec38b08e1c37902fc3e3dbcc253dfeff3b46ed", 0x33, 0x6}, {&(0x7f00000002c0)="b3948f85ce75d69f57b5635abd3aacc0408be1f281fbed1676c5efbecb4d6b9688b3f1e5776953d3807126a95254c57fee27a308f06d6f0e745bb6cf78b8dd17375a0814da16b8a66b192d8355aceccf6acd0be77cd8cb265a6086c5d4eb1bc8dcc313154aaf2833b73388b3b799ff55a4e270422834ab9d87f86a09aa6e95c1f2f411d59a6495d25697907d04e27539c5e9f39466effac57d6b79e42e894d3f5eca7dd04b51b4cc686051a93b403a9a354a5d2d64083618d0c62adefac3690913b49845d5a027a366a98ced38f49a5ba89de3d1c9", 0xd5, 0x1}], 0x20048, &(0x7f00000005c0)=ANY=[@ANYBLOB="71756965742c756e695f786c6174653d302c666f776e65723cfc59199b307a9f37a92ae6015fe0b80785dd46f14085e9b298d7313358bc0cd42e2f2700d9713a361309dc0970580fabfa2640fad6aa26891353c71287d7e91d2a0e37723973945d255027d385276d73e60db86faaf43a54ce000c6c8fe00a45b7a882584f4dccc720ad26b27568835306455719eb057b9f88c2b72741169705d3a2d982fbf3a283a9a839a64293af2195abaac5a9180cb94f39e0c970d2e19dbc8b4de52f1353408b4142ca1e99bc2b4b0c9e615668d3150c9cf7718278c94202ad9447990c5f0f2af72161de76c0", @ANYRESDEC, @ANYBLOB=',defcontext=sysadm_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',appraise_type=imasig,context=root,permit_directio,\x00'])
dup3(r0, r4, 0x80000)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101) (async)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r1}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="4bef1ab14207eed774da6acdef81ea10716816f83a6e0dd58326aa5799cf7f98a3809201c7896e0254bab8518888898319d602e8d3e557501f0345ee24f58c94f8d126797659e765a5b027d3e5c12d8220dfb8c382f12474877f194848f67842997fea926cdd3d84f23a16a30036", 0x6e, 0x8000}, {&(0x7f0000000280)="d489afcc1eba5b2484fa504ed383b9091cba920a15dac8f9be277a9848acbfd9ec38b08e1c37902fc3e3dbcc253dfeff3b46ed", 0x33, 0x6}, {&(0x7f00000002c0)="b3948f85ce75d69f57b5635abd3aacc0408be1f281fbed1676c5efbecb4d6b9688b3f1e5776953d3807126a95254c57fee27a308f06d6f0e745bb6cf78b8dd17375a0814da16b8a66b192d8355aceccf6acd0be77cd8cb265a6086c5d4eb1bc8dcc313154aaf2833b73388b3b799ff55a4e270422834ab9d87f86a09aa6e95c1f2f411d59a6495d25697907d04e27539c5e9f39466effac57d6b79e42e894d3f5eca7dd04b51b4cc686051a93b403a9a354a5d2d64083618d0c62adefac3690913b49845d5a027a366a98ced38f49a5ba89de3d1c9", 0xd5, 0x1}], 0x20048, &(0x7f00000005c0)=ANY=[@ANYBLOB="71756965742c756e695f786c6174653d302c666f776e65723cfc59199b307a9f37a92ae6015fe0b80785dd46f14085e9b298d7313358bc0cd42e2f2700d9713a361309dc0970580fabfa2640fad6aa26891353c71287d7e91d2a0e37723973945d255027d385276d73e60db86faaf43a54ce000c6c8fe00a45b7a882584f4dccc720ad26b27568835306455719eb057b9f88c2b72741169705d3a2d982fbf3a283a9a839a64293af2195abaac5a9180cb94f39e0c970d2e19dbc8b4de52f1353408b4142ca1e99bc2b4b0c9e615668d3150c9cf7718278c94202ad9447990c5f0f2af72161de76c0", @ANYRESDEC, @ANYBLOB=',defcontext=sysadm_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',appraise_type=imasig,context=root,permit_directio,\x00']) (async)
dup3(r0, r4, 0x80000) (async)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef) (async)

15:10:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/125) (async, rerun: 32)
r2 = syz_open_pts(r0, 0x0) (rerun: 32)
dup3(r2, r0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r4 = syz_open_pts(r3, 0x0) (rerun: 64)
dup3(r4, r3, 0x0) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xa934, 0x3f, 0x7fff, 0xffff, 0x17, "5f9240667fb8bbadf7952000777f75d72af4af"})
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff, r1}) (async, rerun: 32)
r2 = syz_open_pts(r0, 0x0) (rerun: 32)
r3 = dup3(r2, r0, 0x0) (async)
r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="4bef1ab14207eed774da6acdef81ea10716816f83a6e0dd58326aa5799cf7f98a3809201c7896e0254bab8518888898319d602e8d3e557501f0345ee24f58c94f8d126797659e765a5b027d3e5c12d8220dfb8c382f12474877f194848f67842997fea926cdd3d84f23a16a30036", 0x6e, 0x8000}, {&(0x7f0000000280)="d489afcc1eba5b2484fa504ed383b9091cba920a15dac8f9be277a9848acbfd9ec38b08e1c37902fc3e3dbcc253dfeff3b46ed", 0x33, 0x6}, {&(0x7f00000002c0)="b3948f85ce75d69f57b5635abd3aacc0408be1f281fbed1676c5efbecb4d6b9688b3f1e5776953d3807126a95254c57fee27a308f06d6f0e745bb6cf78b8dd17375a0814da16b8a66b192d8355aceccf6acd0be77cd8cb265a6086c5d4eb1bc8dcc313154aaf2833b73388b3b799ff55a4e270422834ab9d87f86a09aa6e95c1f2f411d59a6495d25697907d04e27539c5e9f39466effac57d6b79e42e894d3f5eca7dd04b51b4cc686051a93b403a9a354a5d2d64083618d0c62adefac3690913b49845d5a027a366a98ced38f49a5ba89de3d1c9", 0xd5, 0x1}], 0x20048, &(0x7f00000005c0)=ANY=[@ANYBLOB="71756965742c756e695f786c6174653d302c666f776e65723cfc59199b307a9f37a92ae6015fe0b80785dd46f14085e9b298d7313358bc0cd42e2f2700d9713a361309dc0970580fabfa2640fad6aa26891353c71287d7e91d2a0e37723973945d255027d385276d73e60db86faaf43a54ce000c6c8fe00a45b7a882584f4dccc720ad26b27568835306455719eb057b9f88c2b72741169705d3a2d982fbf3a283a9a839a64293af2195abaac5a9180cb94f39e0c970d2e19dbc8b4de52f1353408b4142ca1e99bc2b4b0c9e615668d3150c9cf7718278c94202ad9447990c5f0f2af72161de76c0", @ANYRESDEC, @ANYBLOB=',defcontext=sysadm_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',appraise_type=imasig,context=root,permit_directio,\x00'])
dup3(r0, r4, 0x80000)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

[  562.493648][T32255] loop0: detected capacity change from 0 to 128
[  562.525453][ T2257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  562.663727][T32275] loop0: detected capacity change from 0 to 128
15:10:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x18)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r4 = syz_open_pts(r0, 0x0)
r5 = dup3(r4, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xffffffff, 0x1ff, 0x3, 0x81, 0x3, "a9aa70678013d4315cbbb696cfddad73c159f6"})
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)

[  562.727976][ T2257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
15:10:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/125)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xa934, 0x3f, 0x7fff, 0xffff, 0x17, "5f9240667fb8bbadf7952000777f75d72af4af"})
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
creat(&(0x7f0000000080)='./file0\x00', 0x20) (async)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/125) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xa934, 0x3f, 0x7fff, 0xffff, 0x17, "5f9240667fb8bbadf7952000777f75d72af4af"}) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:10:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xb, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:10:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7e, 0x3, 0x0, 0x3f, 0xfe, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x20)

15:10:59 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540e, &(0x7f0000000000))

15:10:59 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:10:59 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x18)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r4 = syz_open_pts(r0, 0x0)
r5 = dup3(r4, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xffffffff, 0x1ff, 0x3, 0x81, 0x3, "a9aa70678013d4315cbbb696cfddad73c159f6"}) (async)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)

15:11:00 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xb, "00407a90847088d94d286000"})
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xb, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7e, 0x3, 0x0, 0x3f, 0xfe, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TIOCGPTPEER(r0, 0x5441, 0x20)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7e, 0x3, 0x0, 0x3f, 0xfe, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) (async)

15:11:00 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540f, &(0x7f0000000000))

15:11:00 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (rerun: 64)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async, rerun: 32)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xb, "00407a90847088d94d286000"}) (async, rerun: 32)
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0) (async, rerun: 64)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (rerun: 64)

15:11:00 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:00 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffffffffffdef)

15:11:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x18)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r4 = syz_open_pts(r0, 0x0)
r5 = dup3(r4, r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xffffffff, 0x1ff, 0x3, 0x81, 0x3, "a9aa70678013d4315cbbb696cfddad73c159f6"}) (async)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)

15:11:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xf566, 0x80000000, 0xb, "8b309e00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0xfffffffd, 0x0, 0x3f, 0xe, "abecc800"})

15:11:01 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5410, &(0x7f0000000000))

15:11:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4)
syz_open_dev$rtc(&(0x7f0000000080), 0x7fffffff, 0x20240)
dup3(r1, r1, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:01 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:01 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xffffffffffffffff)

15:11:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
syz_open_dev$rtc(&(0x7f0000000080), 0x7fffffff, 0x20240)
dup3(r1, r1, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
syz_open_dev$rtc(&(0x7f0000000080), 0x7fffffff, 0x20240) (async)
dup3(r1, r1, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r6)
r7 = dup3(r1, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

[  565.468429][   T24] audit: type=1400 audit(1642605062.144:472): avc:  denied  { append } for  pid=32380 comm="syz-executor.0" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
15:11:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xf566, 0x80000000, 0xb, "8b309e00"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0xfffffffd, 0x0, 0x3f, 0xe, "abecc800"})

15:11:02 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5411, &(0x7f0000000000))

15:11:02 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
syz_open_pts(r0, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:02 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)

15:11:02 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
dup3(r1, r2, 0x0)
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r6)
r7 = dup3(r1, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
dup3(r1, r2, 0x0) (async)
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0)
r4 = epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xf566, 0x80000000, 0xb, "8b309e00"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0xfffffffd, 0x0, 0x3f, 0xe, "abecc800"})

15:11:03 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))

15:11:03 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:03 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)

15:11:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
dup3(r1, r2, 0x0) (async)
r3 = syz_open_pts(r0, 0x0)
dup3(r3, r0, 0x0) (async, rerun: 64)
r4 = epoll_create1(0x0) (async, rerun: 64)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
epoll_create1(0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1a, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x30520)
dup3(r5, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {0x2}}, './file0\x00'})
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2b2b, r4, &(0x7f0000000180)="a900d7b759670d2f7b5cc1088a12495ac78c6038cd5975df3faa27c396c227d65f3350feac06a997203f34dded7bc6", 0x2f, 0x5d, 0x0, 0x2, r6}])
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r6) (async)
r7 = dup3(r1, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080))

15:11:04 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000000))

15:11:04 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)

15:11:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
epoll_create1(0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1a, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x30520)
dup3(r5, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {0x2}}, './file0\x00'})
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2b2b, r4, &(0x7f0000000180)="a900d7b759670d2f7b5cc1088a12495ac78c6038cd5975df3faa27c396c227d65f3350feac06a997203f34dded7bc6", 0x2f, 0x5d, 0x0, 0x2, r6}])
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1a, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x30520) (async)
dup3(r5, r0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) (async)
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2b2b, r4, &(0x7f0000000180)="a900d7b759670d2f7b5cc1088a12495ac78c6038cd5975df3faa27c396c227d65f3350feac06a997203f34dded7bc6", 0x2f, 0x5d, 0x0, 0x2, r6}]) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:04 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1ff, 0x2, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)

15:11:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1a, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x30520)
dup3(r5, r0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {0x2}}, './file0\x00'})
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2b2b, r4, &(0x7f0000000180)="a900d7b759670d2f7b5cc1088a12495ac78c6038cd5975df3faa27c396c227d65f3350feac06a997203f34dded7bc6", 0x2f, 0x5d, 0x0, 0x2, r6}]) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) (async)

15:11:04 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000))

15:11:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080))

15:11:04 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
pipe2(&(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x4800)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
getgroups(0x5, &(0x7f0000000140)=[<r7=>0x0, 0xee01, 0x0, 0xee00, 0x0])
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000bc0)=@broute={'broute\x00', 0x20, 0x7, 0x9aa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000000c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x27, 0x6006, 'team0\x00', 'veth1_to_hsr\x00', 'ip6gre0\x00', 'veth1_macvtap\x00', @link_local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x116, 0x146, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x78cd, 0x2, 0x5, 0x1, 0x0, "fd0a81844979a86d54ac15df65a170561e5eef63090daef80b99bf04fd282e53d295bb52e871dad59e8c8e82ffc4808a96b6c403a59146d49b7de89f9ec17ebc"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x44, 0xf5, 'veth1_to_bridge\x00', 'virt_wifi0\x00', 'veth1_to_hsr\x00', 'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @link_local, [0x0, 0xff], 0xa6, 0xa6, 0xee, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x5, 0x5}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x4, {0x5}}}}}, {0x5, 0x8, 0x0, 'team0\x00', 'bond0\x00', 'tunl0\x00', 'batadv_slave_1\x00', @link_local, [0xff, 0xff, 0xd37beb94256387ce, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0x11e, 0x16e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, r6, r7, r8, 0x1, 0x2}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x8a59, 0x1e, 0x0, {0x10000}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}], @common=@log={'log\x00', 0x28, {{0x81, "54479947614175520d644d639df11512242d93120fc82fe411a889f2f674", 0xb}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x5, 0x2b, 0x6005, 'netpci0\x00', 'veth0_to_batadv\x00', 'caif0\x00', 'wlan1\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}, {0x5, 0x1, 0x6005, 'erspan0\x00', 'veth1\x00', 'bridge_slave_0\x00', 'veth0_to_bridge\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x9}, {0x3}], 0x1, 0x2}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x2, [{0x12, 0x1, 0x201, 'ip6_vti0\x00', 'tunl0\x00', 'veth0_to_hsr\x00', 'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0x213c5bf5b29011c5, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x11e, 0x16e, [], [@common=@nflog={'nflog\x00', 0x50, {{0xc78, 0x5, 0x6000, 0x0, 0x0, "52708ca751ee3e32e66e66d5f0cb41b63245b08406d4f9ad0880378859d2bac7fe81ecea60a80a29d654d15bf4461ca0b519c2602cb25aeee35856fb62e5cdce"}}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x1}}}}}, {0x11, 0x8, 0x200, 'erspan0\x00', 'rose0\x00', 'veth0_macvtap\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xd44654a93fae80d8, 0xbc23e19e464dd570, 0xff], 0xde, 0x1a6, 0x1f6, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1ff, 0x2}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0xfd, 0x38, 0x3, 0x1}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x0, 0x81, 0x0, 0x0, "7255b58e2cae8944015ff840de2089feb24c7ce99fd4861f87fed1fd8c7ece9dee696f5904b2a69166fdecb99df28f48023dbe2cab0ba80a9956110e7c2e5349"}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x5d, {0x1}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x80}}}}}]}]}, 0xa22)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:05 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1ff, 0x2, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)

15:11:05 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1ff, 0x2, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1ff, 0x2, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0x8) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async)

15:11:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
set_mempolicy(0x0, &(0x7f0000000100)=0xffffffff, 0x9)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xb0)
r3 = pidfd_getfd(r1, r2, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x42000, 0x0)
sync_file_range(r4, 0x100000000, 0xfffffffffffff87f, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000418000000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="fcffffff000000002e2f66696c653000"])
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={<r6=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r6, 0xef1c}, 0x8)
sendto$inet6(r2, &(0x7f0000000040)='8', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:05 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "382fc42465e9ead0"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)=@newchain={0x574, 0x64, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0x8, 0xffe0}, {0x1, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x9c9}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0x520, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2c}, @TCA_U32_SEL={0x2b4, 0x5, {0xb, 0x3f, 0x20, 0x1, 0x3f, 0x7, 0x1, 0x903e, [{0x8, 0xffffff81, 0x2, 0x9}, {0x6, 0xffff, 0x400, 0x1}, {0x3070, 0x10001, 0x6, 0x99}, {0x47e37382, 0x0, 0x8, 0x2}, {0x1, 0x20, 0x1, 0x38000}, {0x4, 0x2, 0x2, 0x6c000000}, {0x101, 0xaf, 0x0, 0x8f}, {0x3, 0x7a, 0x5, 0x9}, {0x7375, 0xfffffffa, 0x5, 0x10000}, {0xffffffff, 0x80000001, 0x5d41c379, 0x9013}, {0x5, 0x0, 0x6, 0x3}, {0x7fff, 0x6, 0x2, 0x6}, {0x0, 0x7, 0x3, 0x1}, {0x3, 0x1f, 0x5, 0x5}, {0x100, 0x4a, 0x6bb00132, 0x4}, {0x8, 0x3d, 0x4, 0x9}, {0x2, 0x2, 0x6, 0x4}, {0xed3b, 0xaf, 0x8, 0xffffff01}, {0xffff8000, 0x5, 0x3, 0x5}, {0x1ff, 0xff, 0x3f, 0x7ff}, {0x40, 0x7, 0xffffb76f, 0x100}, {0x0, 0x0, 0x9, 0x4}, {0x673, 0x7, 0x0, 0x4}, {0x2, 0xffffffff, 0x24000, 0x8001}, {0x6, 0x5, 0x1077, 0x9}, {0xaed, 0x7, 0xe6, 0xdc66}, {0x80, 0x800, 0x3, 0xc2}, {0x800, 0x0, 0xb8a, 0x8}, {0x6, 0xbb, 0x8b7, 0x9eb8}, {0x8, 0x9, 0x80000001, 0x9}, {0x9, 0x10001, 0x4010000, 0x8566}, {0x1000, 0xffffffff, 0x0, 0x3}, {0x4, 0xfff, 0x9, 0x8}, {0x5, 0x10000, 0x6, 0x4}, {0x0, 0x2, 0x5, 0x101}, {0x0, 0x9, 0x6, 0x80000001}, {0x6e6138fd, 0x80000001, 0x8, 0x200}, {0x80, 0xfff, 0x8, 0x935}, {0x3, 0x7a36, 0x6, 0x2}, {0xfff, 0x1000, 0x80000000, 0x2}, {0x4, 0xfffffff9, 0x7, 0x9ea3}, {0x7, 0x9, 0x26c, 0x800}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}, @TCA_U32_HASH={0x8, 0x2, 0x800}, @TCA_U32_ACT={0x240, 0x7, [@m_skbedit={0xe0, 0x16, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x83, 0x6, "beddac5ff32e7d1a81582e25c93644b347aba8e513c85326908f5b3a2f9abb952b0b6eda393cc6d26aadf2d914aea6397fe182e304f80179988c6d91258e59008fd694348870d98bbff77006392275ad99f3494da9dc466f5e27bf144d9c6136f04d6cec3a05abd1184573748f9d28fab24cf0f10f57ab4e7dc414cb566d06"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x94, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x46, 0x6, "56cd39ac9ff0c8c203062c918e08664124f5352088a62c1920b81e3bcb3ecd441514eeca200d6ac253d2c350ec1e3108afa497bc3fbb668ef551cf7f8be24b0f56ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xc8, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xa0fb6620, 0x4, 0x3, 0x4}}]}, {0x79, 0x6, "d1f2648d0350b3ca266f3271a689b28239c5949b5f7c979af087c7c0b1363f80861f12f131e4abe94432a49e4deb5f9a59887ec54de1e63e4898011c1476c0cfa5a87d75be5a69ff603d19f79c43160812d84d13ce68cf180f6c02a99b1b096b74a65ea7d95903292448a77556f986ef1ffff27b3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x54}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffff884}, @TCA_RATE={0x6, 0x5, {0x4, 0x1f}}]}, 0x574}, 0x1, 0x0, 0x0, 0x2040}, 0x48080)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x96, 0x2, 0x401, 0x1}})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:05 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5415, &(0x7f0000000000))

15:11:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000300)=""/32, 0x20}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/217, 0xd9}], 0x5, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000001780)=""/18, 0x12}, {&(0x7f00000017c0)=""/91, 0x5b}, {&(0x7f0000001840)=""/66, 0x42}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/174, 0xae}, {&(0x7f0000002980)=""/14, 0xe}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/125, 0x7d}, {&(0x7f0000003a40)=""/70, 0x46}], 0x9}}, {{&(0x7f0000003b80)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003c00)=""/55, 0x37}, {&(0x7f0000003c40)=""/41, 0x29}, {&(0x7f0000003c80)=""/100, 0x64}, {&(0x7f0000003d00)=""/11, 0xb}, {&(0x7f0000003d40)=""/114, 0x72}, {&(0x7f0000003dc0)=""/220, 0xdc}, {&(0x7f0000003ec0)=""/210, 0xd2}, {&(0x7f0000003fc0)=""/174, 0xae}], 0x8, &(0x7f0000004100)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000004280)=[{&(0x7f00000041c0)=""/159, 0x9f}], 0x1}}, {{&(0x7f00000042c0)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004340)=""/149, 0x95}, {&(0x7f0000004400)=""/175, 0xaf}, {&(0x7f00000044c0)}], 0x3, &(0x7f0000004540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004600), 0x6e, &(0x7f0000004840)=[{&(0x7f0000004680)=""/50, 0x32}, {&(0x7f00000046c0)=""/34, 0x22}, {&(0x7f0000004700)=""/200, 0xc8}, {&(0x7f0000004800)}], 0x4, &(0x7f0000004880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000005ac0)=[{&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/210, 0xd2}], 0x2, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}], 0x8, 0x2020, &(0x7f0000005e40)={0x77359400})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x9, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
syz_open_pts(r0, 0x10000)

15:11:05 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:11:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x4800) (async, rerun: 64)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6) (async)
getgroups(0x5, &(0x7f0000000140)=[<r7=>0x0, 0xee01, 0x0, 0xee00, 0x0])
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000bc0)=@broute={'broute\x00', 0x20, 0x7, 0x9aa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000000c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x27, 0x6006, 'team0\x00', 'veth1_to_hsr\x00', 'ip6gre0\x00', 'veth1_macvtap\x00', @link_local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x116, 0x146, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x78cd, 0x2, 0x5, 0x1, 0x0, "fd0a81844979a86d54ac15df65a170561e5eef63090daef80b99bf04fd282e53d295bb52e871dad59e8c8e82ffc4808a96b6c403a59146d49b7de89f9ec17ebc"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x44, 0xf5, 'veth1_to_bridge\x00', 'virt_wifi0\x00', 'veth1_to_hsr\x00', 'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @link_local, [0x0, 0xff], 0xa6, 0xa6, 0xee, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x5, 0x5}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x4, {0x5}}}}}, {0x5, 0x8, 0x0, 'team0\x00', 'bond0\x00', 'tunl0\x00', 'batadv_slave_1\x00', @link_local, [0xff, 0xff, 0xd37beb94256387ce, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0x11e, 0x16e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, r6, r7, r8, 0x1, 0x2}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x8a59, 0x1e, 0x0, {0x10000}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}], @common=@log={'log\x00', 0x28, {{0x81, "54479947614175520d644d639df11512242d93120fc82fe411a889f2f674", 0xb}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x5, 0x2b, 0x6005, 'netpci0\x00', 'veth0_to_batadv\x00', 'caif0\x00', 'wlan1\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}, {0x5, 0x1, 0x6005, 'erspan0\x00', 'veth1\x00', 'bridge_slave_0\x00', 'veth0_to_bridge\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x9}, {0x3}], 0x1, 0x2}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x2, [{0x12, 0x1, 0x201, 'ip6_vti0\x00', 'tunl0\x00', 'veth0_to_hsr\x00', 'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0x213c5bf5b29011c5, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x11e, 0x16e, [], [@common=@nflog={'nflog\x00', 0x50, {{0xc78, 0x5, 0x6000, 0x0, 0x0, "52708ca751ee3e32e66e66d5f0cb41b63245b08406d4f9ad0880378859d2bac7fe81ecea60a80a29d654d15bf4461ca0b519c2602cb25aeee35856fb62e5cdce"}}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x1}}}}}, {0x11, 0x8, 0x200, 'erspan0\x00', 'rose0\x00', 'veth0_macvtap\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xd44654a93fae80d8, 0xbc23e19e464dd570, 0xff], 0xde, 0x1a6, 0x1f6, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1ff, 0x2}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0xfd, 0x38, 0x3, 0x1}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x0, 0x81, 0x0, 0x0, "7255b58e2cae8944015ff840de2089feb24c7ce99fd4861f87fed1fd8c7ece9dee696f5904b2a69166fdecb99df28f48023dbe2cab0ba80a9956110e7c2e5349"}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x5d, {0x1}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x80}}}}}]}]}, 0xa22)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:06 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = dup3(0xffffffffffffffff, r0, 0x0) (async)
set_mempolicy(0x0, &(0x7f0000000100)=0xffffffff, 0x9) (async)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xb0) (async)
r3 = pidfd_getfd(r1, r2, 0x0) (async)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x42000, 0x0)
sync_file_range(r4, 0x100000000, 0xfffffffffffff87f, 0x6) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000418000000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="fcffffff000000002e2f66696c653000"]) (async)
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={<r6=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r6, 0xef1c}, 0x8)
sendto$inet6(r2, &(0x7f0000000040)='8', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:06 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = dup3(0xffffffffffffffff, r0, 0x0) (async)
set_mempolicy(0x0, &(0x7f0000000100)=0xffffffff, 0x9) (async)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xb0) (async)
r3 = pidfd_getfd(r1, r2, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x42000, 0x0)
sync_file_range(r4, 0x100000000, 0xfffffffffffff87f, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000418000000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="fcffffff000000002e2f66696c653000"]) (async)
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={<r6=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r6, 0xef1c}, 0x8) (async)
sendto$inet6(r2, &(0x7f0000000040)='8', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:06 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "382fc42465e9ead0"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)=@newchain={0x574, 0x64, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0x8, 0xffe0}, {0x1, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x9c9}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0x520, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2c}, @TCA_U32_SEL={0x2b4, 0x5, {0xb, 0x3f, 0x20, 0x1, 0x3f, 0x7, 0x1, 0x903e, [{0x8, 0xffffff81, 0x2, 0x9}, {0x6, 0xffff, 0x400, 0x1}, {0x3070, 0x10001, 0x6, 0x99}, {0x47e37382, 0x0, 0x8, 0x2}, {0x1, 0x20, 0x1, 0x38000}, {0x4, 0x2, 0x2, 0x6c000000}, {0x101, 0xaf, 0x0, 0x8f}, {0x3, 0x7a, 0x5, 0x9}, {0x7375, 0xfffffffa, 0x5, 0x10000}, {0xffffffff, 0x80000001, 0x5d41c379, 0x9013}, {0x5, 0x0, 0x6, 0x3}, {0x7fff, 0x6, 0x2, 0x6}, {0x0, 0x7, 0x3, 0x1}, {0x3, 0x1f, 0x5, 0x5}, {0x100, 0x4a, 0x6bb00132, 0x4}, {0x8, 0x3d, 0x4, 0x9}, {0x2, 0x2, 0x6, 0x4}, {0xed3b, 0xaf, 0x8, 0xffffff01}, {0xffff8000, 0x5, 0x3, 0x5}, {0x1ff, 0xff, 0x3f, 0x7ff}, {0x40, 0x7, 0xffffb76f, 0x100}, {0x0, 0x0, 0x9, 0x4}, {0x673, 0x7, 0x0, 0x4}, {0x2, 0xffffffff, 0x24000, 0x8001}, {0x6, 0x5, 0x1077, 0x9}, {0xaed, 0x7, 0xe6, 0xdc66}, {0x80, 0x800, 0x3, 0xc2}, {0x800, 0x0, 0xb8a, 0x8}, {0x6, 0xbb, 0x8b7, 0x9eb8}, {0x8, 0x9, 0x80000001, 0x9}, {0x9, 0x10001, 0x4010000, 0x8566}, {0x1000, 0xffffffff, 0x0, 0x3}, {0x4, 0xfff, 0x9, 0x8}, {0x5, 0x10000, 0x6, 0x4}, {0x0, 0x2, 0x5, 0x101}, {0x0, 0x9, 0x6, 0x80000001}, {0x6e6138fd, 0x80000001, 0x8, 0x200}, {0x80, 0xfff, 0x8, 0x935}, {0x3, 0x7a36, 0x6, 0x2}, {0xfff, 0x1000, 0x80000000, 0x2}, {0x4, 0xfffffff9, 0x7, 0x9ea3}, {0x7, 0x9, 0x26c, 0x800}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}, @TCA_U32_HASH={0x8, 0x2, 0x800}, @TCA_U32_ACT={0x240, 0x7, [@m_skbedit={0xe0, 0x16, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x83, 0x6, "beddac5ff32e7d1a81582e25c93644b347aba8e513c85326908f5b3a2f9abb952b0b6eda393cc6d26aadf2d914aea6397fe182e304f80179988c6d91258e59008fd694348870d98bbff77006392275ad99f3494da9dc466f5e27bf144d9c6136f04d6cec3a05abd1184573748f9d28fab24cf0f10f57ab4e7dc414cb566d06"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x94, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x46, 0x6, "56cd39ac9ff0c8c203062c918e08664124f5352088a62c1920b81e3bcb3ecd441514eeca200d6ac253d2c350ec1e3108afa497bc3fbb668ef551cf7f8be24b0f56ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xc8, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xa0fb6620, 0x4, 0x3, 0x4}}]}, {0x79, 0x6, "d1f2648d0350b3ca266f3271a689b28239c5949b5f7c979af087c7c0b1363f80861f12f131e4abe94432a49e4deb5f9a59887ec54de1e63e4898011c1476c0cfa5a87d75be5a69ff603d19f79c43160812d84d13ce68cf180f6c02a99b1b096b74a65ea7d95903292448a77556f986ef1ffff27b3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x54}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffff884}, @TCA_RATE={0x6, 0x5, {0x4, 0x1f}}]}, 0x574}, 0x1, 0x0, 0x0, 0x2040}, 0x48080)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x96, 0x2, 0x401, 0x1}})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r5, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "382fc42465e9ead0"}}, 0x48}}, 0x0) (async)
sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0) (async)
sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)=@newchain={0x574, 0x64, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0x8, 0xffe0}, {0x1, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x9c9}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0x520, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2c}, @TCA_U32_SEL={0x2b4, 0x5, {0xb, 0x3f, 0x20, 0x1, 0x3f, 0x7, 0x1, 0x903e, [{0x8, 0xffffff81, 0x2, 0x9}, {0x6, 0xffff, 0x400, 0x1}, {0x3070, 0x10001, 0x6, 0x99}, {0x47e37382, 0x0, 0x8, 0x2}, {0x1, 0x20, 0x1, 0x38000}, {0x4, 0x2, 0x2, 0x6c000000}, {0x101, 0xaf, 0x0, 0x8f}, {0x3, 0x7a, 0x5, 0x9}, {0x7375, 0xfffffffa, 0x5, 0x10000}, {0xffffffff, 0x80000001, 0x5d41c379, 0x9013}, {0x5, 0x0, 0x6, 0x3}, {0x7fff, 0x6, 0x2, 0x6}, {0x0, 0x7, 0x3, 0x1}, {0x3, 0x1f, 0x5, 0x5}, {0x100, 0x4a, 0x6bb00132, 0x4}, {0x8, 0x3d, 0x4, 0x9}, {0x2, 0x2, 0x6, 0x4}, {0xed3b, 0xaf, 0x8, 0xffffff01}, {0xffff8000, 0x5, 0x3, 0x5}, {0x1ff, 0xff, 0x3f, 0x7ff}, {0x40, 0x7, 0xffffb76f, 0x100}, {0x0, 0x0, 0x9, 0x4}, {0x673, 0x7, 0x0, 0x4}, {0x2, 0xffffffff, 0x24000, 0x8001}, {0x6, 0x5, 0x1077, 0x9}, {0xaed, 0x7, 0xe6, 0xdc66}, {0x80, 0x800, 0x3, 0xc2}, {0x800, 0x0, 0xb8a, 0x8}, {0x6, 0xbb, 0x8b7, 0x9eb8}, {0x8, 0x9, 0x80000001, 0x9}, {0x9, 0x10001, 0x4010000, 0x8566}, {0x1000, 0xffffffff, 0x0, 0x3}, {0x4, 0xfff, 0x9, 0x8}, {0x5, 0x10000, 0x6, 0x4}, {0x0, 0x2, 0x5, 0x101}, {0x0, 0x9, 0x6, 0x80000001}, {0x6e6138fd, 0x80000001, 0x8, 0x200}, {0x80, 0xfff, 0x8, 0x935}, {0x3, 0x7a36, 0x6, 0x2}, {0xfff, 0x1000, 0x80000000, 0x2}, {0x4, 0xfffffff9, 0x7, 0x9ea3}, {0x7, 0x9, 0x26c, 0x800}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}, @TCA_U32_HASH={0x8, 0x2, 0x800}, @TCA_U32_ACT={0x240, 0x7, [@m_skbedit={0xe0, 0x16, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x83, 0x6, "beddac5ff32e7d1a81582e25c93644b347aba8e513c85326908f5b3a2f9abb952b0b6eda393cc6d26aadf2d914aea6397fe182e304f80179988c6d91258e59008fd694348870d98bbff77006392275ad99f3494da9dc466f5e27bf144d9c6136f04d6cec3a05abd1184573748f9d28fab24cf0f10f57ab4e7dc414cb566d06"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x94, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x46, 0x6, "56cd39ac9ff0c8c203062c918e08664124f5352088a62c1920b81e3bcb3ecd441514eeca200d6ac253d2c350ec1e3108afa497bc3fbb668ef551cf7f8be24b0f56ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xc8, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xa0fb6620, 0x4, 0x3, 0x4}}]}, {0x79, 0x6, "d1f2648d0350b3ca266f3271a689b28239c5949b5f7c979af087c7c0b1363f80861f12f131e4abe94432a49e4deb5f9a59887ec54de1e63e4898011c1476c0cfa5a87d75be5a69ff603d19f79c43160812d84d13ce68cf180f6c02a99b1b096b74a65ea7d95903292448a77556f986ef1ffff27b3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x54}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffff884}, @TCA_RATE={0x6, 0x5, {0x4, 0x1f}}]}, 0x574}, 0x1, 0x0, 0x0, 0x2040}, 0x48080) (async)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x96, 0x2, 0x401, 0x1}}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r6, r0, 0x0) (async)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef) (async)

15:11:06 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0}) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "382fc42465e9ead0"}}, 0x48}}, 0x0) (async)
sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0) (async)
sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)=@newchain={0x574, 0x64, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0x8, 0xffe0}, {0x1, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x9c9}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_u32={{0x8}, {0x520, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2c}, @TCA_U32_SEL={0x2b4, 0x5, {0xb, 0x3f, 0x20, 0x1, 0x3f, 0x7, 0x1, 0x903e, [{0x8, 0xffffff81, 0x2, 0x9}, {0x6, 0xffff, 0x400, 0x1}, {0x3070, 0x10001, 0x6, 0x99}, {0x47e37382, 0x0, 0x8, 0x2}, {0x1, 0x20, 0x1, 0x38000}, {0x4, 0x2, 0x2, 0x6c000000}, {0x101, 0xaf, 0x0, 0x8f}, {0x3, 0x7a, 0x5, 0x9}, {0x7375, 0xfffffffa, 0x5, 0x10000}, {0xffffffff, 0x80000001, 0x5d41c379, 0x9013}, {0x5, 0x0, 0x6, 0x3}, {0x7fff, 0x6, 0x2, 0x6}, {0x0, 0x7, 0x3, 0x1}, {0x3, 0x1f, 0x5, 0x5}, {0x100, 0x4a, 0x6bb00132, 0x4}, {0x8, 0x3d, 0x4, 0x9}, {0x2, 0x2, 0x6, 0x4}, {0xed3b, 0xaf, 0x8, 0xffffff01}, {0xffff8000, 0x5, 0x3, 0x5}, {0x1ff, 0xff, 0x3f, 0x7ff}, {0x40, 0x7, 0xffffb76f, 0x100}, {0x0, 0x0, 0x9, 0x4}, {0x673, 0x7, 0x0, 0x4}, {0x2, 0xffffffff, 0x24000, 0x8001}, {0x6, 0x5, 0x1077, 0x9}, {0xaed, 0x7, 0xe6, 0xdc66}, {0x80, 0x800, 0x3, 0xc2}, {0x800, 0x0, 0xb8a, 0x8}, {0x6, 0xbb, 0x8b7, 0x9eb8}, {0x8, 0x9, 0x80000001, 0x9}, {0x9, 0x10001, 0x4010000, 0x8566}, {0x1000, 0xffffffff, 0x0, 0x3}, {0x4, 0xfff, 0x9, 0x8}, {0x5, 0x10000, 0x6, 0x4}, {0x0, 0x2, 0x5, 0x101}, {0x0, 0x9, 0x6, 0x80000001}, {0x6e6138fd, 0x80000001, 0x8, 0x200}, {0x80, 0xfff, 0x8, 0x935}, {0x3, 0x7a36, 0x6, 0x2}, {0xfff, 0x1000, 0x80000000, 0x2}, {0x4, 0xfffffff9, 0x7, 0x9ea3}, {0x7, 0x9, 0x26c, 0x800}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}, @TCA_U32_HASH={0x8, 0x2, 0x800}, @TCA_U32_ACT={0x240, 0x7, [@m_skbedit={0xe0, 0x16, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x83, 0x6, "beddac5ff32e7d1a81582e25c93644b347aba8e513c85326908f5b3a2f9abb952b0b6eda393cc6d26aadf2d914aea6397fe182e304f80179988c6d91258e59008fd694348870d98bbff77006392275ad99f3494da9dc466f5e27bf144d9c6136f04d6cec3a05abd1184573748f9d28fab24cf0f10f57ab4e7dc414cb566d06"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x94, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x46, 0x6, "56cd39ac9ff0c8c203062c918e08664124f5352088a62c1920b81e3bcb3ecd441514eeca200d6ac253d2c350ec1e3108afa497bc3fbb668ef551cf7f8be24b0f56ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xc8, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xa0fb6620, 0x4, 0x3, 0x4}}]}, {0x79, 0x6, "d1f2648d0350b3ca266f3271a689b28239c5949b5f7c979af087c7c0b1363f80861f12f131e4abe94432a49e4deb5f9a59887ec54de1e63e4898011c1476c0cfa5a87d75be5a69ff603d19f79c43160812d84d13ce68cf180f6c02a99b1b096b74a65ea7d95903292448a77556f986ef1ffff27b3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x54}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffff884}, @TCA_RATE={0x6, 0x5, {0x4, 0x1f}}]}, 0x574}, 0x1, 0x0, 0x0, 0x2040}, 0x48080) (async)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x96, 0x2, 0x401, 0x1}}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:06 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5416, &(0x7f0000000000))

15:11:06 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, "1d113c81002000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
fgetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="737935208239000000002b00", @ANYRESOCT=r5, @ANYRESHEX], &(0x7f0000000180)=""/88, 0x58)
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x80000)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:06 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000300)=""/32, 0x20}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/217, 0xd9}], 0x5, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000001780)=""/18, 0x12}, {&(0x7f00000017c0)=""/91, 0x5b}, {&(0x7f0000001840)=""/66, 0x42}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/174, 0xae}, {&(0x7f0000002980)=""/14, 0xe}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/125, 0x7d}, {&(0x7f0000003a40)=""/70, 0x46}], 0x9}}, {{&(0x7f0000003b80)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003c00)=""/55, 0x37}, {&(0x7f0000003c40)=""/41, 0x29}, {&(0x7f0000003c80)=""/100, 0x64}, {&(0x7f0000003d00)=""/11, 0xb}, {&(0x7f0000003d40)=""/114, 0x72}, {&(0x7f0000003dc0)=""/220, 0xdc}, {&(0x7f0000003ec0)=""/210, 0xd2}, {&(0x7f0000003fc0)=""/174, 0xae}], 0x8, &(0x7f0000004100)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000004280)=[{&(0x7f00000041c0)=""/159, 0x9f}], 0x1}}, {{&(0x7f00000042c0)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004340)=""/149, 0x95}, {&(0x7f0000004400)=""/175, 0xaf}, {&(0x7f00000044c0)}], 0x3, &(0x7f0000004540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004600), 0x6e, &(0x7f0000004840)=[{&(0x7f0000004680)=""/50, 0x32}, {&(0x7f00000046c0)=""/34, 0x22}, {&(0x7f0000004700)=""/200, 0xc8}, {&(0x7f0000004800)}], 0x4, &(0x7f0000004880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000005ac0)=[{&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/210, 0xd2}], 0x2, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}], 0x8, 0x2020, &(0x7f0000005e40)={0x77359400}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x9, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
syz_open_pts(r0, 0x10000)

15:11:06 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:11:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
pipe2(&(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x4800)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
getgroups(0x5, &(0x7f0000000140)=[<r7=>0x0, 0xee01, 0x0, 0xee00, 0x0])
fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000bc0)=@broute={'broute\x00', 0x20, 0x7, 0x9aa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000000c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x27, 0x6006, 'team0\x00', 'veth1_to_hsr\x00', 'ip6gre0\x00', 'veth1_macvtap\x00', @link_local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x116, 0x146, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x78cd, 0x2, 0x5, 0x1, 0x0, "fd0a81844979a86d54ac15df65a170561e5eef63090daef80b99bf04fd282e53d295bb52e871dad59e8c8e82ffc4808a96b6c403a59146d49b7de89f9ec17ebc"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x44, 0xf5, 'veth1_to_bridge\x00', 'virt_wifi0\x00', 'veth1_to_hsr\x00', 'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @link_local, [0x0, 0xff], 0xa6, 0xa6, 0xee, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x5, 0x5}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x4, {0x5}}}}}, {0x5, 0x8, 0x0, 'team0\x00', 'bond0\x00', 'tunl0\x00', 'batadv_slave_1\x00', @link_local, [0xff, 0xff, 0xd37beb94256387ce, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0x11e, 0x16e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, r6, r7, r8, 0x1, 0x2}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x8a59, 0x1e, 0x0, {0x10000}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}], @common=@log={'log\x00', 0x28, {{0x81, "54479947614175520d644d639df11512242d93120fc82fe411a889f2f674", 0xb}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x5, 0x2b, 0x6005, 'netpci0\x00', 'veth0_to_batadv\x00', 'caif0\x00', 'wlan1\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}, {0x5, 0x1, 0x6005, 'erspan0\x00', 'veth1\x00', 'bridge_slave_0\x00', 'veth0_to_bridge\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x9}, {0x3}], 0x1, 0x2}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x2, [{0x12, 0x1, 0x201, 'ip6_vti0\x00', 'tunl0\x00', 'veth0_to_hsr\x00', 'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0x213c5bf5b29011c5, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x11e, 0x16e, [], [@common=@nflog={'nflog\x00', 0x50, {{0xc78, 0x5, 0x6000, 0x0, 0x0, "52708ca751ee3e32e66e66d5f0cb41b63245b08406d4f9ad0880378859d2bac7fe81ecea60a80a29d654d15bf4461ca0b519c2602cb25aeee35856fb62e5cdce"}}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x1}}}}}, {0x11, 0x8, 0x200, 'erspan0\x00', 'rose0\x00', 'veth0_macvtap\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xd44654a93fae80d8, 0xbc23e19e464dd570, 0xff], 0xde, 0x1a6, 0x1f6, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1ff, 0x2}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0xfd, 0x38, 0x3, 0x1}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x0, 0x81, 0x0, 0x0, "7255b58e2cae8944015ff840de2089feb24c7ce99fd4861f87fed1fd8c7ece9dee696f5904b2a69166fdecb99df28f48023dbe2cab0ba80a9956110e7c2e5349"}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x5d, {0x1}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x80}}}}}]}]}, 0xa22)
read$eventfd(r3, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
pipe2(&(0x7f0000000080), 0x4800) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async)
setuid(r6) (async)
getgroups(0x5, &(0x7f0000000140)=[0x0, 0xee01, 0x0, 0xee00, 0x0]) (async)
fstat(0xffffffffffffffff, &(0x7f0000000180)) (async)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000bc0)=@broute={'broute\x00', 0x20, 0x7, 0x9aa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000000c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x27, 0x6006, 'team0\x00', 'veth1_to_hsr\x00', 'ip6gre0\x00', 'veth1_macvtap\x00', @link_local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x116, 0x146, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x78cd, 0x2, 0x5, 0x1, 0x0, "fd0a81844979a86d54ac15df65a170561e5eef63090daef80b99bf04fd282e53d295bb52e871dad59e8c8e82ffc4808a96b6c403a59146d49b7de89f9ec17ebc"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x3, 0x44, 0xf5, 'veth1_to_bridge\x00', 'virt_wifi0\x00', 'veth1_to_hsr\x00', 'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @link_local, [0x0, 0xff], 0xa6, 0xa6, 0xee, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x5, 0x5}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x4, {0x5}}}}}, {0x5, 0x8, 0x0, 'team0\x00', 'bond0\x00', 'tunl0\x00', 'batadv_slave_1\x00', @link_local, [0xff, 0xff, 0xd37beb94256387ce, 0xff, 0x0, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0x11e, 0x16e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, r6, r7, r8, 0x1, 0x2}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x8a59, 0x1e, 0x0, {0x10000}}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}], @common=@log={'log\x00', 0x28, {{0x81, "54479947614175520d644d639df11512242d93120fc82fe411a889f2f674", 0xb}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x5, 0x2b, 0x6005, 'netpci0\x00', 'veth0_to_batadv\x00', 'caif0\x00', 'wlan1\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}, {0x5, 0x1, 0x6005, 'erspan0\x00', 'veth1\x00', 'bridge_slave_0\x00', 'veth0_to_bridge\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x10e, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x9}, {0x3}], 0x1, 0x2}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x2, [{0x12, 0x1, 0x201, 'ip6_vti0\x00', 'tunl0\x00', 'veth0_to_hsr\x00', 'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0x213c5bf5b29011c5, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x11e, 0x16e, [], [@common=@nflog={'nflog\x00', 0x50, {{0xc78, 0x5, 0x6000, 0x0, 0x0, "52708ca751ee3e32e66e66d5f0cb41b63245b08406d4f9ad0880378859d2bac7fe81ecea60a80a29d654d15bf4461ca0b519c2602cb25aeee35856fb62e5cdce"}}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xfffffffffffffffc}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x1}}}}}, {0x11, 0x8, 0x200, 'erspan0\x00', 'rose0\x00', 'veth0_macvtap\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0xd44654a93fae80d8, 0xbc23e19e464dd570, 0xff], 0xde, 0x1a6, 0x1f6, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1ff, 0x2}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0xfd, 0x38, 0x3, 0x1}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x0, 0x81, 0x0, 0x0, "7255b58e2cae8944015ff840de2089feb24c7ce99fd4861f87fed1fd8c7ece9dee696f5904b2a69166fdecb99df28f48023dbe2cab0ba80a9956110e7c2e5349"}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x5d, {0x1}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x80}}}}}]}]}, 0xa22) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)

15:11:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, r2, 0x0)
r3 = syz_open_pts(r0, 0x0)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}], 0x2, 0x1fc, &(0x7f00000000c0)={[0x1]}, 0x8)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
ioctl$BLKTRACESTOP(r7, 0x1275, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
r9 = dup3(r3, r8, 0x0)
read$eventfd(r9, &(0x7f0000000040), 0x8)

15:11:07 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)="af068ba9d3b94dcbbd2e8094297dedf2f4983040aa737c780c366b509ee73f2ab77b56cdb0edd8819805d514db986e3e61bcebcaf8be585e9aceea564faa0cdd9e6a853910661eef836eff0a6949d8d71287aa6f11dcac88b92b5a1937bc4776ea36f44e", 0x64, r4}, 0x68)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r7, 0x0, 0x4}, 0xc)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r7, 0xeac6}, 0x8)
r8 = syz_open_pts(r0, 0x0)
dup3(r8, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:07 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5417, &(0x7f0000000000))

15:11:07 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, "1d113c81002000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
fgetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="737935208239000000002b00", @ANYRESOCT=r5, @ANYRESHEX], &(0x7f0000000180)=""/88, 0x58)
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x80000)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000300)=""/32, 0x20}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/217, 0xd9}], 0x5, &(0x7f0000001600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000001780)=""/18, 0x12}, {&(0x7f00000017c0)=""/91, 0x5b}, {&(0x7f0000001840)=""/66, 0x42}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/174, 0xae}, {&(0x7f0000002980)=""/14, 0xe}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/125, 0x7d}, {&(0x7f0000003a40)=""/70, 0x46}], 0x9}}, {{&(0x7f0000003b80)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003c00)=""/55, 0x37}, {&(0x7f0000003c40)=""/41, 0x29}, {&(0x7f0000003c80)=""/100, 0x64}, {&(0x7f0000003d00)=""/11, 0xb}, {&(0x7f0000003d40)=""/114, 0x72}, {&(0x7f0000003dc0)=""/220, 0xdc}, {&(0x7f0000003ec0)=""/210, 0xd2}, {&(0x7f0000003fc0)=""/174, 0xae}], 0x8, &(0x7f0000004100)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000004280)=[{&(0x7f00000041c0)=""/159, 0x9f}], 0x1}}, {{&(0x7f00000042c0)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004340)=""/149, 0x95}, {&(0x7f0000004400)=""/175, 0xaf}, {&(0x7f00000044c0)}], 0x3, &(0x7f0000004540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004600), 0x6e, &(0x7f0000004840)=[{&(0x7f0000004680)=""/50, 0x32}, {&(0x7f00000046c0)=""/34, 0x22}, {&(0x7f0000004700)=""/200, 0xc8}, {&(0x7f0000004800)}], 0x4, &(0x7f0000004880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000005ac0)=[{&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/210, 0xd2}], 0x2, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}], 0x8, 0x2020, &(0x7f0000005e40)={0x77359400}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x9, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
syz_open_pts(r0, 0x10000)

15:11:07 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:11:07 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, r2, 0x0)
r3 = syz_open_pts(r0, 0x0)
r4 = epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}], 0x2, 0x1fc, &(0x7f00000000c0)={[0x1]}, 0x8) (async)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)) (async)
ioctl$BLKTRACESTOP(r7, 0x1275, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
r9 = dup3(r3, r8, 0x0)
read$eventfd(r9, &(0x7f0000000040), 0x8)

15:11:07 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, r2, 0x0) (async)
r3 = syz_open_pts(r0, 0x0) (async, rerun: 64)
r4 = epoll_create1(0x0) (async, rerun: 64)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0) (async)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}], 0x2, 0x1fc, &(0x7f00000000c0)={[0x1]}, 0x8)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) (async)
r8 = socket$l2tp(0x2, 0x2, 0x73)
r9 = dup3(r3, r8, 0x0)
read$eventfd(r9, &(0x7f0000000040), 0x8)

15:11:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)="af068ba9d3b94dcbbd2e8094297dedf2f4983040aa737c780c366b509ee73f2ab77b56cdb0edd8819805d514db986e3e61bcebcaf8be585e9aceea564faa0cdd9e6a853910661eef836eff0a6949d8d71287aa6f11dcac88b92b5a1937bc4776ea36f44e", 0x64, r4}, 0x68) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async, rerun: 64)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r7, 0x0, 0x4}, 0xc) (async)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r7, 0xeac6}, 0x8) (async)
r8 = syz_open_pts(r0, 0x0)
dup3(r8, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)="af068ba9d3b94dcbbd2e8094297dedf2f4983040aa737c780c366b509ee73f2ab77b56cdb0edd8819805d514db986e3e61bcebcaf8be585e9aceea564faa0cdd9e6a853910661eef836eff0a6949d8d71287aa6f11dcac88b92b5a1937bc4776ea36f44e", 0x64, r4}, 0x68) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r7, 0x0, 0x4}, 0xc) (async)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r7, 0xeac6}, 0x8)
r8 = syz_open_pts(r0, 0x0)
dup3(r8, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:08 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5418, &(0x7f0000000000))

15:11:08 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, "1d113c81002000"}) (async, rerun: 32)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 32)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async, rerun: 64)
fgetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="737935208239000000002b00", @ANYRESOCT=r5, @ANYRESHEX], &(0x7f0000000180)=""/88, 0x58) (async, rerun: 64)
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x80000)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:08 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xabc, 0x0, 0x1, 0x8, 0x6, "19715ec2110e12826620c289eaeaa22b1e125d", 0x5, 0x80})

15:11:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r6)
r7 = dup3(r1, r0, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:08 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140))

15:11:08 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000f80)={r6, 0x10000, 0x0, [0x8, 0x401, 0x1, 0x35a5], [0x400, 0x9, 0x878, 0x3, 0x4, 0xff, 0x1, 0x5bbc, 0x5, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x80000000, 0x8, 0x73, 0x8, 0x401, 0x1, 0x2, 0x4, 0x3, 0x6, 0x1, 0x7ff, 0xffffffffffffffc4, 0x0, 0x3012bd38, 0x4, 0xf7, 0x4, 0x101, 0x355, 0x80000000, 0xfff, 0x2, 0x5, 0x800, 0x4, 0xffffffff00000001, 0x9, 0xc9cc, 0xfffffffffffffffa, 0x101, 0x7f, 0x100000001, 0x10001, 0x5, 0x3, 0x4, 0x1, 0x40, 0x10000, 0x0, 0x9, 0x4, 0xfffffffffffffff9, 0x657d0870, 0x7, 0x4, 0x7, 0x200, 0x0, 0x8000, 0x79, 0x3, 0x6c7, 0x10001, 0x7ec, 0x3, 0x0, 0x2, 0x3, 0x1, 0x80000000, 0x2, 0x5, 0xffff, 0x3ff000000000000, 0x200, 0xe9cc, 0x0, 0x9, 0xcba, 0x1, 0x1f, 0x8000, 0x5, 0x7, 0x9, 0xfffffffffffffff7, 0xa0000, 0x2, 0x7, 0xffffffffffff0001, 0xfff, 0x8, 0x7, 0x0, 0x5, 0x3, 0xff, 0x7, 0x12e1, 0x9df, 0x4, 0xffff, 0x3, 0x6, 0x8, 0x4, 0x80, 0x2, 0x72, 0x400, 0xec, 0xffffffffffffffff, 0xffffffffffffffff, 0xed, 0x9]})
r7 = dup3(0xffffffffffffffff, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140))
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000140)={0x0, 0x200, @status={[0x0, 0x2, 0x3, 0x5b396086, 0x6f, 0x6]}, [0x2, 0x40, 0x2, 0x7, 0x2, 0x3f, 0xaa0e, 0x10001, 0x5, 0x2, 0x80, 0x2, 0x1, 0x6, 0x6, 0xffffffffffffffff, 0x3, 0x9, 0xfffffffffffeffff, 0x8000, 0x4, 0x5, 0x5, 0x5, 0xe33, 0x1, 0x1, 0x1, 0x5, 0x1e, 0x7, 0x9, 0x3c2, 0x8, 0x7, 0x2b, 0x6, 0xf2, 0x5, 0x0, 0x8001, 0x4, 0xffffffff, 0x101, 0xb76, 0x8, 0x8, 0x0, 0x101, 0xfffffffffffffc01, 0x6, 0x1, 0x3f, 0x6, 0x101, 0x7, 0x0, 0x8001, 0x347, 0xcf, 0x7f, 0x7fffffff, 0xfffffffe, 0x8001]})
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x80, 0x0, 0x2, 0x0, 0x23, "00407a90847001d94d2860000000000000e900"})
syz_io_uring_complete(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r2, r1, 0x0)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1003)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
close_range(r3, 0xffffffffffffffff, 0x2)
syz_open_pts(r7, 0x280180)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:08 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0) (fail_nth: 1)

[  572.367502][T32695] FAULT_INJECTION: forcing a failure.
[  572.367502][T32695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  572.380625][T32695] CPU: 0 PID: 32695 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0
[  572.389095][T32695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  572.399150][T32695] Call Trace:
[  572.402485][T32695]  <TASK>
[  572.405428][T32695]  dump_stack_lvl+0xd6/0x122
[  572.410079][T32695]  dump_stack+0x11/0x1b
[  572.414287][T32695]  should_fail+0x23c/0x250
[  572.418704][T32695]  should_fail_usercopy+0x16/0x20
[  572.423726][T32695]  _copy_to_user+0x1c/0x90
[  572.428146][T32695]  simple_read_from_buffer+0xab/0x120
[  572.433520][T32695]  proc_fail_nth_read+0x10d/0x150
[  572.438568][T32695]  ? proc_fault_inject_write+0x230/0x230
[  572.444202][T32695]  vfs_read+0x1e6/0x750
[  572.448431][T32695]  ? __fget_files+0x1d2/0x210
[  572.453115][T32695]  ksys_read+0xd9/0x190
[  572.457272][T32695]  __x64_sys_read+0x3e/0x50
[  572.461840][T32695]  do_syscall_64+0x44/0xd0
[  572.466267][T32695]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  572.472245][T32695] RIP: 0033:0x7fb4dd6afb9c
[  572.476667][T32695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  572.496332][T32695] RSP: 002b:00007fb4dc852160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  572.504754][T32695] RAX: ffffffffffffffda RBX: 00007fb4dd810030 RCX: 00007fb4dd6afb9c
15:11:09 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000000))

15:11:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xabc, 0x0, 0x1, 0x8, 0x6, "19715ec2110e12826620c289eaeaa22b1e125d", 0x5, 0x80})

15:11:09 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

[  572.512726][T32695] RDX: 000000000000000f RSI: 00007fb4dc8521e0 RDI: 0000000000000005
[  572.520708][T32695] RBP: 00007fb4dc8521d0 R08: 0000000000000000 R09: 0000000000000000
[  572.528757][T32695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.536805][T32695] R13: 00007ffe3c7851af R14: 00007fb4dc852300 R15: 0000000000022000
[  572.544779][T32695]  </TASK>
15:11:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) (async)

15:11:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0) (async)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000f80)={r6, 0x10000, 0x0, [0x8, 0x401, 0x1, 0x35a5], [0x400, 0x9, 0x878, 0x3, 0x4, 0xff, 0x1, 0x5bbc, 0x5, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x80000000, 0x8, 0x73, 0x8, 0x401, 0x1, 0x2, 0x4, 0x3, 0x6, 0x1, 0x7ff, 0xffffffffffffffc4, 0x0, 0x3012bd38, 0x4, 0xf7, 0x4, 0x101, 0x355, 0x80000000, 0xfff, 0x2, 0x5, 0x800, 0x4, 0xffffffff00000001, 0x9, 0xc9cc, 0xfffffffffffffffa, 0x101, 0x7f, 0x100000001, 0x10001, 0x5, 0x3, 0x4, 0x1, 0x40, 0x10000, 0x0, 0x9, 0x4, 0xfffffffffffffff9, 0x657d0870, 0x7, 0x4, 0x7, 0x200, 0x0, 0x8000, 0x79, 0x3, 0x6c7, 0x10001, 0x7ec, 0x3, 0x0, 0x2, 0x3, 0x1, 0x80000000, 0x2, 0x5, 0xffff, 0x3ff000000000000, 0x200, 0xe9cc, 0x0, 0x9, 0xcba, 0x1, 0x1f, 0x8000, 0x5, 0x7, 0x9, 0xfffffffffffffff7, 0xa0000, 0x2, 0x7, 0xffffffffffff0001, 0xfff, 0x8, 0x7, 0x0, 0x5, 0x3, 0xff, 0x7, 0x12e1, 0x9df, 0x4, 0xffff, 0x3, 0x6, 0x8, 0x4, 0x80, 0x2, 0x72, 0x400, 0xec, 0xffffffffffffffff, 0xffffffffffffffff, 0xed, 0x9]}) (async)
r7 = dup3(0xffffffffffffffff, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140)) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000140)={0x0, 0x200, @status={[0x0, 0x2, 0x3, 0x5b396086, 0x6f, 0x6]}, [0x2, 0x40, 0x2, 0x7, 0x2, 0x3f, 0xaa0e, 0x10001, 0x5, 0x2, 0x80, 0x2, 0x1, 0x6, 0x6, 0xffffffffffffffff, 0x3, 0x9, 0xfffffffffffeffff, 0x8000, 0x4, 0x5, 0x5, 0x5, 0xe33, 0x1, 0x1, 0x1, 0x5, 0x1e, 0x7, 0x9, 0x3c2, 0x8, 0x7, 0x2b, 0x6, 0xf2, 0x5, 0x0, 0x8001, 0x4, 0xffffffff, 0x101, 0xb76, 0x8, 0x8, 0x0, 0x101, 0xfffffffffffffc01, 0x6, 0x1, 0x3f, 0x6, 0x101, 0x7, 0x0, 0x8001, 0x347, 0xcf, 0x7f, 0x7fffffff, 0xfffffffe, 0x8001]}) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x80, 0x0, 0x2, 0x0, 0x23, "00407a90847001d94d2860000000000000e900"}) (async)
syz_io_uring_complete(0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r2, r1, 0x0) (async)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1003) (async)
r4 = epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
close_range(r3, 0xffffffffffffffff, 0x2)
syz_open_pts(r7, 0x280180)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:10 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000000))

15:11:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xabc, 0x0, 0x1, 0x8, 0x6, "19715ec2110e12826620c289eaeaa22b1e125d", 0x5, 0x80})

15:11:10 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x2, 0x0)

15:11:10 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140))

15:11:10 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000f80)={r6, 0x10000, 0x0, [0x8, 0x401, 0x1, 0x35a5], [0x400, 0x9, 0x878, 0x3, 0x4, 0xff, 0x1, 0x5bbc, 0x5, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x80000000, 0x8, 0x73, 0x8, 0x401, 0x1, 0x2, 0x4, 0x3, 0x6, 0x1, 0x7ff, 0xffffffffffffffc4, 0x0, 0x3012bd38, 0x4, 0xf7, 0x4, 0x101, 0x355, 0x80000000, 0xfff, 0x2, 0x5, 0x800, 0x4, 0xffffffff00000001, 0x9, 0xc9cc, 0xfffffffffffffffa, 0x101, 0x7f, 0x100000001, 0x10001, 0x5, 0x3, 0x4, 0x1, 0x40, 0x10000, 0x0, 0x9, 0x4, 0xfffffffffffffff9, 0x657d0870, 0x7, 0x4, 0x7, 0x200, 0x0, 0x8000, 0x79, 0x3, 0x6c7, 0x10001, 0x7ec, 0x3, 0x0, 0x2, 0x3, 0x1, 0x80000000, 0x2, 0x5, 0xffff, 0x3ff000000000000, 0x200, 0xe9cc, 0x0, 0x9, 0xcba, 0x1, 0x1f, 0x8000, 0x5, 0x7, 0x9, 0xfffffffffffffff7, 0xa0000, 0x2, 0x7, 0xffffffffffff0001, 0xfff, 0x8, 0x7, 0x0, 0x5, 0x3, 0xff, 0x7, 0x12e1, 0x9df, 0x4, 0xffff, 0x3, 0x6, 0x8, 0x4, 0x80, 0x2, 0x72, 0x400, 0xec, 0xffffffffffffffff, 0xffffffffffffffff, 0xed, 0x9]})
r7 = dup3(0xffffffffffffffff, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140))
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000140)={0x0, 0x200, @status={[0x0, 0x2, 0x3, 0x5b396086, 0x6f, 0x6]}, [0x2, 0x40, 0x2, 0x7, 0x2, 0x3f, 0xaa0e, 0x10001, 0x5, 0x2, 0x80, 0x2, 0x1, 0x6, 0x6, 0xffffffffffffffff, 0x3, 0x9, 0xfffffffffffeffff, 0x8000, 0x4, 0x5, 0x5, 0x5, 0xe33, 0x1, 0x1, 0x1, 0x5, 0x1e, 0x7, 0x9, 0x3c2, 0x8, 0x7, 0x2b, 0x6, 0xf2, 0x5, 0x0, 0x8001, 0x4, 0xffffffff, 0x101, 0xb76, 0x8, 0x8, 0x0, 0x101, 0xfffffffffffffc01, 0x6, 0x1, 0x3f, 0x6, 0x101, 0x7, 0x0, 0x8001, 0x347, 0xcf, 0x7f, 0x7fffffff, 0xfffffffe, 0x8001]}) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:10 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x80, 0x0, 0x2, 0x0, 0x23, "00407a90847001d94d2860000000000000e900"})
syz_io_uring_complete(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r2, r1, 0x0)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1003)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
close_range(r3, 0xffffffffffffffff, 0x2)
syz_open_pts(r7, 0x280180)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x80, 0x0, 0x2, 0x0, 0x23, "00407a90847001d94d2860000000000000e900"}) (async)
syz_io_uring_complete(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(0xffffffffffffffff, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x1003) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
dup3(r6, r5, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)) (async)
close_range(r3, 0xffffffffffffffff, 0x2) (async)
syz_open_pts(r7, 0x280180) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:10 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
ppoll(&(0x7f0000000480)=[{r1}], 0x1, &(0x7f0000000500), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)={{0x107, 0xb, 0x2, 0x125, 0x1bb, 0x1200, 0x2e2, 0x3f}, "20bd9dad7178dc734ebdd397bb2f1b2017b9b89122bb2583aba7fb6bfc4d0b3f5e115e5ec69b9fc0fe01ae4daa6a493c86ea3839b116070d905993d50a21", ['\x00']}, 0x15e)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x20000000, 0x0, 0x0, 0x80000000, 0x16, "0040e3e054fc7c00"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r2, 0x541b, &(0x7f0000000000))
r4 = epoll_create1(0x0)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x4, 0x0, 0xb72, 0x7, 0xf, "02ed167da04a8f5b05405ff28bd070fa1061d1"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))

15:11:10 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000000))

15:11:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:10 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x4b47, 0x0)

15:11:11 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x7f, 0x1, 0x3, 0x2, 0x3, 0x0, 0x272, 0x38, 0x3e, 0x5, 0x1000, 0x20, 0x2, 0x4, 0x6, 0xfffb}, [{0x7, 0xd3, 0x101, 0x7f, 0x7f, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x0, 0x9, 0x2, 0x4, 0xfffffffe, 0x46}], "4e51a3887973efb5cd16ee5c945854c4f26397577fd02792bbd5ebaa5d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
dup3(r0, r0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x6e)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
syz_open_dev$tty1(0xc, 0x4, 0x3)

15:11:11 executing program 0:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x5)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0xfffffdef)

15:11:11 executing program 0:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x5)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0xfffffdef)

15:11:11 executing program 0:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x5) (async)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0xfffffdef)

15:11:11 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x8, 0x1, 0x2, 0x2, "edaf730dc0014d829f8c1418f22e94de3c45a2"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:11 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
r1 = epoll_create(0x5) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) (async)
ppoll(&(0x7f0000000480)=[{r1}], 0x1, &(0x7f0000000500), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) (async)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)={{0x107, 0xb, 0x2, 0x125, 0x1bb, 0x1200, 0x2e2, 0x3f}, "20bd9dad7178dc734ebdd397bb2f1b2017b9b89122bb2583aba7fb6bfc4d0b3f5e115e5ec69b9fc0fe01ae4daa6a493c86ea3839b116070d905993d50a21", ['\x00']}, 0x15e)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x20000000, 0x0, 0x0, 0x80000000, 0x16, "0040e3e054fc7c00"}) (async, rerun: 64)
r3 = syz_open_pts(r2, 0x0) (rerun: 64)
dup3(r3, r2, 0x0) (async)
ioctl$TIOCSTI(r2, 0x541b, &(0x7f0000000000))
r4 = epoll_create1(0x0)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x4, 0x0, 0xb72, 0x7, 0xf, "02ed167da04a8f5b05405ff28bd070fa1061d1"})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))

15:11:11 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000000))

15:11:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:11 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x4b49, 0x0)

15:11:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x7f, 0x1, 0x3, 0x2, 0x3, 0x0, 0x272, 0x38, 0x3e, 0x5, 0x1000, 0x20, 0x2, 0x4, 0x6, 0xfffb}, [{0x7, 0xd3, 0x101, 0x7f, 0x7f, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x0, 0x9, 0x2, 0x4, 0xfffffffe, 0x46}], "4e51a3887973efb5cd16ee5c945854c4f26397577fd02792bbd5ebaa5d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
dup3(r0, r0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x6e)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x7f, 0x1, 0x3, 0x2, 0x3, 0x0, 0x272, 0x38, 0x3e, 0x5, 0x1000, 0x20, 0x2, 0x4, 0x6, 0xfffb}, [{0x7, 0xd3, 0x101, 0x7f, 0x7f, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x0, 0x9, 0x2, 0x4, 0xfffffffe, 0x46}], "4e51a3887973efb5cd16ee5c945854c4f26397577fd02792bbd5ebaa5d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f1) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
dup3(r0, r0, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x6e) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3) (async)

15:11:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x7f, 0x1, 0x3, 0x2, 0x3, 0x0, 0x272, 0x38, 0x3e, 0x5, 0x1000, 0x20, 0x2, 0x4, 0x6, 0xfffb}, [{0x7, 0xd3, 0x101, 0x7f, 0x7f, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x0, 0x9, 0x2, 0x4, 0xfffffffe, 0x46}], "4e51a3887973efb5cd16ee5c945854c4f26397577fd02792bbd5ebaa5d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
dup3(r0, r0, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x6e) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3)

15:11:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
syz_open_pts(0xffffffffffffffff, 0x80000)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:12 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x8, 0x1, 0x2, 0x2, "edaf730dc0014d829f8c1418f22e94de3c45a2"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:12 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0) (async)
r1 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
ppoll(&(0x7f0000000480)=[{r1}], 0x1, &(0x7f0000000500), 0x0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) (async)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)={{0x107, 0xb, 0x2, 0x125, 0x1bb, 0x1200, 0x2e2, 0x3f}, "20bd9dad7178dc734ebdd397bb2f1b2017b9b89122bb2583aba7fb6bfc4d0b3f5e115e5ec69b9fc0fe01ae4daa6a493c86ea3839b116070d905993d50a21", ['\x00']}, 0x15e)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x20000000, 0x0, 0x0, 0x80000000, 0x16, "0040e3e054fc7c00"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0) (async, rerun: 32)
ioctl$TIOCSTI(r2, 0x541b, &(0x7f0000000000)) (async, rerun: 32)
r4 = epoll_create1(0x0) (async)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x4, 0x0, 0xb72, 0x7, 0xf, "02ed167da04a8f5b05405ff28bd070fa1061d1"}) (async, rerun: 32)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))

15:11:12 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5422, &(0x7f0000000000))

15:11:12 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:12 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5409, 0x0)

15:11:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
syz_open_pts(0xffffffffffffffff, 0x80000) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:13 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x8, 0x1, 0x2, 0x2, "edaf730dc0014d829f8c1418f22e94de3c45a2"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:13 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x810, r0, 0x11940000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x2500, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1411, 0x100, 0x70bd2b, 0x4, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x78}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x38}, 0x1, 0x0, 0x0, 0x400000c0}, 0x4000000)

[  576.502417][   T24] audit: type=1400 audit(1642605073.174:473): avc:  denied  { map } for  pid=387 comm="syz-executor.0" path="/dev/ptmx" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dri_device_t:s0"
15:11:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x4, 0xe3c8, 0x3})

15:11:13 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000))

15:11:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x211, 0x400, 0x7fffffff, 0xffff, 0xfb3})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:13 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540b, 0x0)

15:11:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x4, 0xe3c8, 0x3})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x4, 0xe3c8, 0x3}) (async)

15:11:13 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540c, 0x0)

15:11:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x4, 0xe3c8, 0x3})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x4, 0xe3c8, 0x3}) (async)

15:11:13 executing program 4:
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2}, 0x8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8}, &(0x7f0000000140)=0x8)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TIOCSTI(r3, 0x541b, &(0x7f0000000000))

15:11:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async, rerun: 32)
syz_open_pts(0xffffffffffffffff, 0x80000) (rerun: 32)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:13 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x810, r0, 0x11940000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x2500, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1411, 0x100, 0x70bd2b, 0x4, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x78}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x38}, 0x1, 0x0, 0x0, 0x400000c0}, 0x4000000)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x810, r0, 0x11940000) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x2500, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1411, 0x100, 0x70bd2b, 0x4, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x78}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x38}, 0x1, 0x0, 0x0, 0x400000c0}, 0x4000000) (async)

15:11:14 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000000))

15:11:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x211, 0x400, 0x7fffffff, 0xffff, 0xfb3})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x211, 0x400, 0x7fffffff, 0xffff, 0xfb3}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:14 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540d, 0x0)

15:11:14 executing program 4:
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) (async)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2}, 0x8) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8}, &(0x7f0000000140)=0x8) (async)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TIOCSTI(r3, 0x541b, &(0x7f0000000000))

15:11:14 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x9, 0x8000, 0x4, 0x5, 0xc, "8110dbc1bcfbc6b14a87ec9c187f7a44cce1ed"})
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x810, r0, 0x11940000) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async, rerun: 64)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x2500, 0x0) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1411, 0x100, 0x70bd2b, 0x4, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x78}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x38}, 0x1, 0x0, 0x0, 0x400000c0}, 0x4000000)

15:11:15 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000000))

15:11:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x211, 0x400, 0x7fffffff, 0xffff, 0xfb3}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:15 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540e, 0x0)

15:11:15 executing program 4:
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2}, 0x8) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8}, &(0x7f0000000140)=0x8)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 32)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0) (async)
ioctl$TIOCSTI(r3, 0x541b, &(0x7f0000000000))

15:11:15 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x9, 0x8000, 0x4, 0x5, 0xc, "8110dbc1bcfbc6b14a87ec9c187f7a44cce1ed"}) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(r1, 0x8000)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140))
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r3 = io_uring_setup(0x2ba7, &(0x7f0000000200)={0x0, 0x302a})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0x8d, 0x2, 0x6, "4ea26c360500", "708e02026e97875b8e8bcebd63a192d0cb2b778b9cb05a9f96ac63b88d374c0de98dae4cb455050bf20423b8536e68ab85168f2a27830ddedf632b2504efdc81eaefcfae17f63fa1374ff76d94aea63ba166b4347741633204356bcbe62fb27f382d34a4ae76376a577b385368b8f9cff0c566dbed9c9108"}, 0xfffffef7, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r6, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r4, r6, r4], 0x7)
r7 = syz_open_pts(r5, 0x0)
dup3(r7, r5, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000000c0)={r5})

15:11:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(r1, 0x8000)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140))
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(r1, 0x8000)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140))
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
syz_open_pts(r1, 0x8000) (async)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140)) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef) (async)

15:11:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x100, 0xff, 0x4, 0x5, 0x16, "3baf0b658e4be09c5aa7a990c269cc63c05eeb"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:15 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000000))

15:11:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x10)
ioctl$TCFLSH(r1, 0x540b, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="fe0000000100000018000000", @ANYRES32=<r2=>r1, @ANYBLOB='q\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_open_pts(r2, 0x200202)

15:11:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0) (async, rerun: 32)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 32)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000200)={0x0, 0x302a}) (rerun: 32)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0x8d, 0x2, 0x6, "4ea26c360500", "708e02026e97875b8e8bcebd63a192d0cb2b778b9cb05a9f96ac63b88d374c0de98dae4cb455050bf20423b8536e68ab85168f2a27830ddedf632b2504efdc81eaefcfae17f63fa1374ff76d94aea63ba166b4347741633204356bcbe62fb27f382d34a4ae76376a577b385368b8f9cff0c566dbed9c9108"}, 0xfffffef7, 0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r6 = syz_open_pts(0xffffffffffffffff, 0x0) (rerun: 32)
dup3(r6, 0xffffffffffffffff, 0x0) (async)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r4, r6, r4], 0x7)
r7 = syz_open_pts(r5, 0x0)
dup3(r7, r5, 0x0) (async, rerun: 64)
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000000c0)={r5}) (rerun: 64)

15:11:16 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x540f, 0x0)

15:11:16 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x9, 0x8000, 0x4, 0x5, 0xc, "8110dbc1bcfbc6b14a87ec9c187f7a44cce1ed"}) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:16 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x100, 0xff, 0x4, 0x5, 0x16, "3baf0b658e4be09c5aa7a990c269cc63c05eeb"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:16 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x100, 0xff, 0x4, 0x5, 0x16, "3baf0b658e4be09c5aa7a990c269cc63c05eeb"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x100, 0xff, 0x4, 0x5, 0x16, "3baf0b658e4be09c5aa7a990c269cc63c05eeb"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)

15:11:16 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000000))

15:11:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x10)
ioctl$TCFLSH(r1, 0x540b, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async, rerun: 64)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000140)) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="fe0000000100000018000000", @ANYRES32=<r2=>r1, @ANYBLOB='q\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 32)
syz_open_pts(r2, 0x200202) (rerun: 32)

15:11:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x4080, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000200)={0x0, 0x302a})
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000140), &(0x7f0000000340)={0x0, 0xfb, 0x8d, 0x2, 0x6, "4ea26c360500", "708e02026e97875b8e8bcebd63a192d0cb2b778b9cb05a9f96ac63b88d374c0de98dae4cb455050bf20423b8536e68ab85168f2a27830ddedf632b2504efdc81eaefcfae17f63fa1374ff76d94aea63ba166b4347741633204356bcbe62fb27f382d34a4ae76376a577b385368b8f9cff0c566dbed9c9108"}, 0xfffffef7, 0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r6, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r4, r6, r4], 0x7)
r7 = syz_open_pts(r5, 0x0)
dup3(r7, r5, 0x0) (async)
ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000000c0)={r5})

15:11:17 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5410, 0x0)

15:11:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="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")

15:11:17 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r4, 0x40)

15:11:17 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5429, &(0x7f0000000000))

15:11:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x10)
ioctl$TCFLSH(r1, 0x540b, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000140)) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="fe0000000100000018000000", @ANYRES32=<r2=>r1, @ANYBLOB='q\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_open_pts(r2, 0x200202)

15:11:17 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5411, 0x0)

15:11:17 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x91, 0x0, 0xffffffff, 0x7fffffff, 0xe, "47dab9ab064ab7ec39bd61a73d95c1476efd3c"})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x9, 0x81, 0x1, 0x8b, 0x1, [0x8, 0x8000, 0x80, 0x8]})
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f000004f700)={{<r7=>0x0, 0x200, 0x2, 0x7, 0x100000001, 0x1, 0x101, 0x101, 0x3, 0x6, 0xfffffffa, 0x6, 0x7, 0x1f8000000000, 0x6}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f7c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x5, "cd828a07715149"})
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="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")
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="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") (async)

15:11:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="d1bd40930f7b6c5fec6ef1aa81943f73c7033c3c86dfd4851e3783090e5cba24990ff078d4d909c1998117a09c27b61aa25ad8a986790c437de02b55e53cfba6ee7e6eba5a695cef059c7c355320b515b74d192079400f8646c34765849bb95bea8afd7cbf483c7accbb1cd82fb9b44e6521e8a4d79debdfbc25730f8c865752c8cb0da10a50f92f7ac2f59e74cc26b840242a1f6396e31380a3ce6240095904a1870a31237375c8da09f547a3cf5376ff476c156bcc938224ca944d361f4909b50989611312f7d69d5ffb6b1be4a10dc273f5de10101248cc60c82837b9af412d5e86ec07141e4f7ba80eff55f0e9a0fd6a711159fe266ff644d7ba2ddc41246d919e8fd10e719f55f8206b2a4d039f9a546b80b9c8bf82790c851e328eeeb06bf35d2960da1c3e476b8f")

15:11:18 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r4, 0x40)

15:11:18 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000000))

15:11:18 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = getpgrp(0xffffffffffffffff)
fcntl$setown(r0, 0x8, r1)
ioctl$TIOCNXCL(r0, 0x540d)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x44)
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x40010, r2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0)

15:11:18 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)

15:11:18 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x91, 0x0, 0xffffffff, 0x7fffffff, 0xe, "47dab9ab064ab7ec39bd61a73d95c1476efd3c"})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x9, 0x81, 0x1, 0x8b, 0x1, [0x8, 0x8000, 0x80, 0x8]})
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f000004f700)={{<r7=>0x0, 0x200, 0x2, 0x7, 0x100000001, 0x1, 0x101, 0x101, 0x3, 0x6, 0xfffffffa, 0x6, 0x7, 0x1f8000000000, 0x6}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f7c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x5, "cd828a07715149"})
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x91, 0x0, 0xffffffff, 0x7fffffff, 0xe, "47dab9ab064ab7ec39bd61a73d95c1476efd3c"}) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x9, 0x81, 0x1, 0x8b, 0x1, [0x8, 0x8000, 0x80, 0x8]}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r5, r0, 0x0) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f000004f700)={{0x0, 0x200, 0x2, 0x7, 0x100000001, 0x1, 0x101, 0x101, 0x3, 0x6, 0xfffffffa, 0x6, 0x7, 0x1f8000000000, 0x6}, 0x18, [0x0, 0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f7c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x5, "cd828a07715149"}) (async)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef) (async)

15:11:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bdd427b9f07ad5, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/146)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "00407a90847088d94d286000"})
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:18 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_pts(r4, 0x40)

15:11:19 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x91, 0x0, 0xffffffff, 0x7fffffff, 0xe, "47dab9ab064ab7ec39bd61a73d95c1476efd3c"}) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x9, 0x81, 0x1, 0x8b, 0x1, [0x8, 0x8000, 0x80, 0x8]}) (async)
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f000004f700)={{<r7=>0x0, 0x200, 0x2, 0x7, 0x100000001, 0x1, 0x101, 0x101, 0x3, 0x6, 0xfffffffa, 0x6, 0x7, 0x1f8000000000, 0x6}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f7c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x5, "cd828a07715149"}) (async)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:19 executing program 0:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140))
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8d4000073bd2424a00096ab6bba35b7b2fa1bd500000000000017000000000000004ab6febacae3a4c171f0b57d39618c65915909388fbc781dad2143589c94a8f7edad56575a5ffacb3d09a8c5973e86b13d781972d5323c8be89f8e55cd7ed0ddcc40193622a2aa", @ANYRES16=r0, @ANYBLOB="080025bd7000fcdbdf25080000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r2 = syz_open_pts(r1, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_io_uring_complete(0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x1, 0x40, 0x5, 0xd83, 0x10, "6089de5de7da8dc2357659592b7c83e9741484"})
r6 = syz_open_pts(r4, 0x0)
r7 = dup3(r6, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140))
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x400, 0xa4a3, 0x8000, 0x3, 0x0, "b797b053ff47c769d4d3ba309b667be011048a", 0x9, 0x7ff})
r8 = dup3(r2, r1, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:19 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bdd427b9f07ad5, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) (async)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/146) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:19 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000000))

15:11:19 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = getpgrp(0xffffffffffffffff)
fcntl$setown(r0, 0x8, r1) (async)
ioctl$TIOCNXCL(r0, 0x540d) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x44)
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x40010, r2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0)

15:11:19 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5413, 0x0)

15:11:19 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x20, 0x8, "d82a1e27b0f97fdff633da03f14675690324a2"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x86041, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x3f)
r5 = dup3(r2, r3, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)

15:11:20 executing program 0:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140))
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8d4000073bd2424a00096ab6bba35b7b2fa1bd500000000000017000000000000004ab6febacae3a4c171f0b57d39618c65915909388fbc781dad2143589c94a8f7edad56575a5ffacb3d09a8c5973e86b13d781972d5323c8be89f8e55cd7ed0ddcc40193622a2aa", @ANYRES16=r0, @ANYBLOB="080025bd7000fcdbdf25080000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r2 = syz_open_pts(r1, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_io_uring_complete(0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x1, 0x40, 0x5, 0xd83, 0x10, "6089de5de7da8dc2357659592b7c83e9741484"})
r6 = syz_open_pts(r4, 0x0)
r7 = dup3(r6, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140))
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x400, 0xa4a3, 0x8000, 0x3, 0x0, "b797b053ff47c769d4d3ba309b667be011048a", 0x9, 0x7ff})
r8 = dup3(r2, r1, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8d4000073bd2424a00096ab6bba35b7b2fa1bd500000000000017000000000000004ab6febacae3a4c171f0b57d39618c65915909388fbc781dad2143589c94a8f7edad56575a5ffacb3d09a8c5973e86b13d781972d5323c8be89f8e55cd7ed0ddcc40193622a2aa", @ANYRES16=r0, @ANYBLOB="080025bd7000fcdbdf25080000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r1, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_io_uring_complete(0x0) (async)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x1, 0x40, 0x5, 0xd83, 0x10, "6089de5de7da8dc2357659592b7c83e9741484"}) (async)
syz_open_pts(r4, 0x0) (async)
dup3(r6, r4, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140)) (async)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x400, 0xa4a3, 0x8000, 0x3, 0x0, "b797b053ff47c769d4d3ba309b667be011048a", 0x9, 0x7ff}) (async)
dup3(r2, r1, 0x0) (async)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef) (async)

15:11:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bdd427b9f07ad5, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/146)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "00407a90847088d94d286000"})
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1bdd427b9f07ad5, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) (async)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/146) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r4, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:20 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000000))

15:11:20 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = getpgrp(0xffffffffffffffff)
fcntl$setown(r0, 0x8, r1) (async)
ioctl$TIOCNXCL(r0, 0x540d)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x44)
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x40010, r2, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0)

15:11:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x7fffffff, 0xa248, 0x5, 0x80000000, 0x1b, "7959df07d7e57f8b66296fc71221d2c0ee9167"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

[  583.648545][   T24] audit: type=1400 audit(1642605080.324:474): avc:  denied  { append } for  pid=675 comm="syz-executor.4" name="ptmx" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dri_device_t:s0"
15:11:20 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5414, 0x0)

15:11:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x7fffffff, 0xa248, 0x5, 0x80000000, 0x1b, "7959df07d7e57f8b66296fc71221d2c0ee9167"}) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0) (async, rerun: 64)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (rerun: 64)

15:11:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x7fffffff, 0xa248, 0x5, 0x80000000, 0x1b, "7959df07d7e57f8b66296fc71221d2c0ee9167"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x7fffffff, 0xa248, 0x5, 0x80000000, 0x1b, "7959df07d7e57f8b66296fc71221d2c0ee9167"}) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:20 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x20, 0x8, "d82a1e27b0f97fdff633da03f14675690324a2"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x86041, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x3f)
r5 = dup3(r2, r3, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x20, 0x8, "d82a1e27b0f97fdff633da03f14675690324a2"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x86041, 0x0) (async)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x3f) (async)
dup3(r2, r3, 0x0) (async)
read$eventfd(r5, &(0x7f0000000040), 0x8) (async)

15:11:20 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x20, 0x8, "d82a1e27b0f97fdff633da03f14675690324a2"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x86041, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x3f)
r5 = dup3(r2, r3, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x20, 0x8, "d82a1e27b0f97fdff633da03f14675690324a2"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x86041, 0x0) (async)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x3f) (async)
dup3(r2, r3, 0x0) (async)
read$eventfd(r5, &(0x7f0000000040), 0x8) (async)

15:11:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x10001, 0x1000005, 0x0, 0x3, 0x1, "00040000007088d91505261af285c03700"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:20 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/89})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="5ef1a00c95570693fe63e2c11319cedec3c92bc05b00c4a7e885f5922566ce1a1f1b120ea81d522cedef6a67cedc9b791d73ffcffb0fdf", @ANYBLOB="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", @ANYRES32=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:20 executing program 0:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) (async)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8d4000073bd2424a00096ab6bba35b7b2fa1bd500000000000017000000000000004ab6febacae3a4c171f0b57d39618c65915909388fbc781dad2143589c94a8f7edad56575a5ffacb3d09a8c5973e86b13d781972d5323c8be89f8e55cd7ed0ddcc40193622a2aa", @ANYRES16=r0, @ANYBLOB="080025bd7000fcdbdf25080000000500300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r2 = syz_open_pts(r1, 0x0) (async)
r3 = epoll_create1(0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_io_uring_complete(0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000180)={0x1, 0x40, 0x5, 0xd83, 0x10, "6089de5de7da8dc2357659592b7c83e9741484"}) (async)
r6 = syz_open_pts(r4, 0x0)
r7 = dup3(r6, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140)) (async, rerun: 64)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x400, 0xa4a3, 0x8000, 0x3, 0x0, "b797b053ff47c769d4d3ba309b667be011048a", 0x9, 0x7ff}) (async, rerun: 64)
r8 = dup3(r2, r1, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:21 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000000))

15:11:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x4, 0x40, [0x79d, 0x1, 0x80, 0x40000000001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:21 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5415, 0x0)

15:11:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x10001, 0x1000005, 0x0, 0x3, 0x1, "00040000007088d91505261af285c03700"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:21 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/89})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="5ef1a00c95570693fe63e2c11319cedec3c92bc05b00c4a7e885f5922566ce1a1f1b120ea81d522cedef6a67cedc9b791d73ffcffb0fdf", @ANYBLOB="39f13465fad7935862450dd06d10bf274e9c0a4a10919b847a2ca4c2c8d293636f937e9ddd087b0f766967581a2e7295637a31407f75dde0e8f85ded2cf0705be986c17ac3121b455629b98eaa306609a6d32c92136e590a9adcca65c2396b34c81e706cd7a1b9e35f4876486c363adfb38c3460732697cb55dfbf63c0527d392ef59cc43238febcf93a18f628529100140308a8aff35c58b9066d528fcc53bf4d90d8750cd85b0a347d01609aab5dbbea14f1e1a5125f7db9b346f96c3fdfe9226a5de81335b9aa1a37a4ed8a77c53a41768abf37058642fea225eb58fe22e260215aa90b9467480c35af329d87f465f3e730c3df2b3021ee06d4", @ANYRES32=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/89}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="5ef1a00c95570693fe63e2c11319cedec3c92bc05b00c4a7e885f5922566ce1a1f1b120ea81d522cedef6a67cedc9b791d73ffcffb0fdf", @ANYBLOB="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", @ANYRES32=r0], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)

15:11:21 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x4, 0x9, 0x3ff, 0x3, 0x3, 0x1f, 0x1bd, 0x38, 0x370, 0x954d, 0x5, 0x20, 0x1, 0x7, 0x2, 0x3}, [{0x1, 0x101, 0x8533, 0x80000001, 0x10001, 0x1000, 0x853, 0x6}, {0x6474e551, 0xfff, 0x7, 0x4, 0xf3, 0x5, 0xde9, 0x8}], "30a0978dc2114ce25be1ef1ddd31f9f6015df20323f87fc0720a71a52a20792ff197214a861f6893c6bea684a200daf5e01ad077586d3e0a5c56789c81096ffb12f2ce183bb031126c6ceb95cb73bdb9a4d97379da048a675b2b8e1aa7863b773083a5e013c9ffcb8aef24320de03f8ab772f25ed87fc26632ab21859f6e8686be0833d67b9fd040af763f6c29e7fc50d74d017121fec374b2d839214927beab12ded5ee031852cb499fb6474505043e4bcdb3cb43b019be58d6c21c955e2f7ffcbe4723c9bff181d11b42cec2b7"}, 0x146)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r2 = syz_open_pts(r0, 0x0)
close(r0)
dup3(r2, r0, 0x0)
r3 = eventfd2(0x66618659, 0x800)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
dup3(r7, r3, 0x0)
read$eventfd(r3, &(0x7f0000000000), 0x8)

15:11:21 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000000))

15:11:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x4, 0x40, [0x79d, 0x1, 0x80, 0x40000000001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:22 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5416, 0x0)

15:11:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x10001, 0x1000005, 0x0, 0x3, 0x1, "00040000007088d91505261af285c03700"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:22 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/89})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="5ef1a00c95570693fe63e2c11319cedec3c92bc05b00c4a7e885f5922566ce1a1f1b120ea81d522cedef6a67cedc9b791d73ffcffb0fdf", @ANYBLOB="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", @ANYRES32=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/89}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="5ef1a00c95570693fe63e2c11319cedec3c92bc05b00c4a7e885f5922566ce1a1f1b120ea81d522cedef6a67cedc9b791d73ffcffb0fdf", @ANYBLOB="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", @ANYRES32=r0], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)

15:11:22 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x1, 0x3, 0x9, 0x4, 0x1a, "b3134f5e65f9836b4a2dc90418d7249957f76a"})
ioctl$TIOCEXCL(r2, 0x540c)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r1, 0x0)
dup3(r3, r1, 0x0)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080))
r4 = syz_open_pts(r0, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
r6 = dup3(r4, r5, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)
fadvise64(r6, 0x8001, 0x100000001, 0x4)

15:11:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x4, 0x9, 0x3ff, 0x3, 0x3, 0x1f, 0x1bd, 0x38, 0x370, 0x954d, 0x5, 0x20, 0x1, 0x7, 0x2, 0x3}, [{0x1, 0x101, 0x8533, 0x80000001, 0x10001, 0x1000, 0x853, 0x6}, {0x6474e551, 0xfff, 0x7, 0x4, 0xf3, 0x5, 0xde9, 0x8}], "30a0978dc2114ce25be1ef1ddd31f9f6015df20323f87fc0720a71a52a20792ff197214a861f6893c6bea684a200daf5e01ad077586d3e0a5c56789c81096ffb12f2ce183bb031126c6ceb95cb73bdb9a4d97379da048a675b2b8e1aa7863b773083a5e013c9ffcb8aef24320de03f8ab772f25ed87fc26632ab21859f6e8686be0833d67b9fd040af763f6c29e7fc50d74d017121fec374b2d839214927beab12ded5ee031852cb499fb6474505043e4bcdb3cb43b019be58d6c21c955e2f7ffcbe4723c9bff181d11b42cec2b7"}, 0x146)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r2 = syz_open_pts(r0, 0x0)
close(r0)
dup3(r2, r0, 0x0)
r3 = eventfd2(0x66618659, 0x800)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
dup3(r7, r3, 0x0)
read$eventfd(r3, &(0x7f0000000000), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x4, 0x9, 0x3ff, 0x3, 0x3, 0x1f, 0x1bd, 0x38, 0x370, 0x954d, 0x5, 0x20, 0x1, 0x7, 0x2, 0x3}, [{0x1, 0x101, 0x8533, 0x80000001, 0x10001, 0x1000, 0x853, 0x6}, {0x6474e551, 0xfff, 0x7, 0x4, 0xf3, 0x5, 0xde9, 0x8}], "30a0978dc2114ce25be1ef1ddd31f9f6015df20323f87fc0720a71a52a20792ff197214a861f6893c6bea684a200daf5e01ad077586d3e0a5c56789c81096ffb12f2ce183bb031126c6ceb95cb73bdb9a4d97379da048a675b2b8e1aa7863b773083a5e013c9ffcb8aef24320de03f8ab772f25ed87fc26632ab21859f6e8686be0833d67b9fd040af763f6c29e7fc50d74d017121fec374b2d839214927beab12ded5ee031852cb499fb6474505043e4bcdb3cb43b019be58d6c21c955e2f7ffcbe4723c9bff181d11b42cec2b7"}, 0x146) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
close(r0) (async)
dup3(r2, r0, 0x0) (async)
eventfd2(0x66618659, 0x800) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
dup3(r6, r5, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)) (async)
dup3(r7, r3, 0x0) (async)
read$eventfd(r3, &(0x7f0000000000), 0x8) (async)

15:11:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x4, 0x9, 0x3ff, 0x3, 0x3, 0x1f, 0x1bd, 0x38, 0x370, 0x954d, 0x5, 0x20, 0x1, 0x7, 0x2, 0x3}, [{0x1, 0x101, 0x8533, 0x80000001, 0x10001, 0x1000, 0x853, 0x6}, {0x6474e551, 0xfff, 0x7, 0x4, 0xf3, 0x5, 0xde9, 0x8}], "30a0978dc2114ce25be1ef1ddd31f9f6015df20323f87fc0720a71a52a20792ff197214a861f6893c6bea684a200daf5e01ad077586d3e0a5c56789c81096ffb12f2ce183bb031126c6ceb95cb73bdb9a4d97379da048a675b2b8e1aa7863b773083a5e013c9ffcb8aef24320de03f8ab772f25ed87fc26632ab21859f6e8686be0833d67b9fd040af763f6c29e7fc50d74d017121fec374b2d839214927beab12ded5ee031852cb499fb6474505043e4bcdb3cb43b019be58d6c21c955e2f7ffcbe4723c9bff181d11b42cec2b7"}, 0x146) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r2 = syz_open_pts(r0, 0x0)
close(r0) (async)
dup3(r2, r0, 0x0)
r3 = eventfd2(0x66618659, 0x800) (async)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
dup3(r7, r3, 0x0)
read$eventfd(r3, &(0x7f0000000000), 0x8)

15:11:22 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000000))

15:11:22 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x4, 0x40, [0x79d, 0x1, 0x80, 0x40000000001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x4, 0x40, [0x79d, 0x1, 0x80, 0x40000000001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:22 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001140)={0x3, [0x200, 0xc546, 0x1000]}, 0xa)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000001180))
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x5, 0xc6, 0x3, 0x4, 0xfffffffffffffff8, 0x81})
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/4096)

15:11:23 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5417, 0x0)

15:11:23 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
dup3(r6, r5, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000080))
r7 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000140))
ioctl$TCXONC(r7, 0x540a, 0x2)

15:11:23 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x1, 0x3, 0x9, 0x4, 0x1a, "b3134f5e65f9836b4a2dc90418d7249957f76a"}) (async)
ioctl$TIOCEXCL(r2, 0x540c) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r1, 0x0)
dup3(r3, r1, 0x0) (async)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080))
r4 = syz_open_pts(r0, 0x0) (async)
r5 = socket$l2tp(0x2, 0x2, 0x73)
r6 = dup3(r4, r5, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8) (async)
fadvise64(r6, 0x8001, 0x100000001, 0x4)

15:11:23 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000000))

15:11:23 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x800, 0x2, 0x8, 0x7fffffff, 0x15, "029f51f89ce3963ccdea91dc99fafecc9b5778"})
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:23 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001140)={0x3, [0x200, 0xc546, 0x1000]}, 0xa) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000001180)) (async)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x5, 0xc6, 0x3, 0x4, 0xfffffffffffffff8, 0x81}) (async)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/4096)

15:11:23 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
dup3(r6, r5, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000080))
r7 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000140))
ioctl$TCXONC(r7, 0x540a, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
dup3(r6, r5, 0x0) (async)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000080)) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000140)) (async)
ioctl$TCXONC(r7, 0x540a, 0x2) (async)

15:11:23 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5418, 0x0)

15:11:24 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 64)
r2 = epoll_create1(0x0) (rerun: 64)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
dup3(r6, r5, 0x0) (async, rerun: 64)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000080)) (async, rerun: 64)
r7 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000140)) (async)
ioctl$TCXONC(r7, 0x540a, 0x2)

15:11:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0) (rerun: 64)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001140)={0x3, [0x200, 0xc546, 0x1000]}, 0xa) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r4 = syz_open_pts(r3, 0x0) (rerun: 32)
r5 = dup3(r4, r3, 0x0)
ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000001180))
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0x5, 0xc6, 0x3, 0x4, 0xfffffffffffffff8, 0x81}) (async, rerun: 64)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/4096) (rerun: 64)

15:11:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x1, 0x3, 0x9, 0x4, 0x1a, "b3134f5e65f9836b4a2dc90418d7249957f76a"}) (async, rerun: 64)
ioctl$TIOCEXCL(r2, 0x540c) (async, rerun: 64)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r3 = syz_open_pts(r1, 0x0)
dup3(r3, r1, 0x0) (async)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080))
r4 = syz_open_pts(r0, 0x0) (async, rerun: 32)
r5 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)
r6 = dup3(r4, r5, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)
fadvise64(r6, 0x8001, 0x100000001, 0x4)

15:11:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000001100000018000000", @ANYRES32=<r2=>r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00'])
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000280)={0x8, 0x9, 0x0, 0xfff, 0xe6, 0xa})
r4 = syz_open_pts(0xffffffffffffffff, 0x400000)
dup3(r4, r3, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x407)
pread64(r2, &(0x7f0000000140)=""/69, 0x45, 0x4)
r5 = syz_open_pts(r2, 0x450a02)
r6 = socket$l2tp(0x2, 0x2, 0x73)
r7 = dup3(r5, r6, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r5, @ANYBLOB="01000080000000002e2f66696c6532f13e603c0fa2992847d367be7ceb9440b884f7141045c4b97618e8e0fbb5c559672c0c"])
ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000200))

15:11:24 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000000))

15:11:24 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x800, 0x2, 0x8, 0x7fffffff, 0x15, "029f51f89ce3963ccdea91dc99fafecc9b5778"}) (async)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:24 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x40000, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x100, 0x1, 0x3, 0x4, 0x3f}, 0x14)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:24 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541d, 0x0)

15:11:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x80800) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async)
syz_open_pts(r2, 0x200) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef) (async)

15:11:25 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000001100000018000000", @ANYRES32=<r2=>r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000280)={0x8, 0x9, 0x0, 0xfff, 0xe6, 0xa}) (async)
r4 = syz_open_pts(0xffffffffffffffff, 0x400000)
dup3(r4, r3, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x407) (async)
pread64(r2, &(0x7f0000000140)=""/69, 0x45, 0x4) (async)
r5 = syz_open_pts(r2, 0x450a02) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
r7 = dup3(r5, r6, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r5, @ANYBLOB="01000080000000002e2f66696c6532f13e603c0fa2992847d367be7ceb9440b884f7141045c4b97618e8e0fbb5c559672c0c"])
ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000200))

15:11:25 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000000))

15:11:25 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x800, 0x2, 0x8, 0x7fffffff, 0x15, "029f51f89ce3963ccdea91dc99fafecc9b5778"}) (async)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
r1 = epoll_create1(0x0) (rerun: 64)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x40000, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x100, 0x1, 0x3, 0x4, 0x3f}, 0x14) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8, 0x0, "00407a90847088d94d286000"}) (async, rerun: 32)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:25 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541e, 0x0)

15:11:25 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200) (async)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:26 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000001100000018000000", @ANYRES32=<r2=>r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00'])
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000280)={0x8, 0x9, 0x0, 0xfff, 0xe6, 0xa})
r4 = syz_open_pts(0xffffffffffffffff, 0x400000)
dup3(r4, r3, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x407)
pread64(r2, &(0x7f0000000140)=""/69, 0x45, 0x4)
r5 = syz_open_pts(r2, 0x450a02)
r6 = socket$l2tp(0x2, 0x2, 0x73)
r7 = dup3(r5, r6, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r5, @ANYBLOB="01000080000000002e2f66696c6532f13e603c0fa2992847d367be7ceb9440b884f7141045c4b97618e8e0fbb5c559672c0c"])
ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000200))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000001100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000280)={0x8, 0x9, 0x0, 0xfff, 0xe6, 0xa}) (async)
syz_open_pts(0xffffffffffffffff, 0x400000) (async)
dup3(r4, r3, 0x0) (async)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x407) (async)
pread64(r2, &(0x7f0000000140)=""/69, 0x45, 0x4) (async)
syz_open_pts(r2, 0x450a02) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r5, r6, 0x0) (async)
read$eventfd(r7, &(0x7f0000000040), 0x8) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="01000080000000002e2f66696c6532f13e603c0fa2992847d367be7ceb9440b884f7141045c4b97618e8e0fbb5c559672c0c"]) (async)
ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000200)) (async)

15:11:26 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:26 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x40087602, &(0x7f0000000000))

15:11:26 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x80000)
epoll_pwait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x6, &(0x7f0000000140)={[0x1f]}, 0x8)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, 0x0, "717b2379e1b866d35927a6d58621e8506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x6680, 0x5, 0x1f, 0x91a, 0xb, "bafb0b6cb723731dd000181a036f60a0e48b30"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000180)={0x0, 0x5})

15:11:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x40000, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x100, 0x1, 0x3, 0x4, 0x3f}, 0x14)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x40000, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x100, 0x1, 0x3, 0x4, 0x3f}, 0x14) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:26 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541e, 0x0)

15:11:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
syz_open_pts(r0, 0x90802)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
syz_open_pts(r0, 0x90802) (async, rerun: 64)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (rerun: 64)

15:11:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
syz_open_pts(r0, 0x90802) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_pts(r2, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a86847088d94d286022000003459a64a0"})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:26 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
syz_open_pts(r0, 0x400000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:26 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:27 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000000))

15:11:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = epoll_create1(0x80000)
epoll_pwait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x6, &(0x7f0000000140)={[0x1f]}, 0x8) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, 0x0, "717b2379e1b866d35927a6d58621e8506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x6680, 0x5, 0x1f, 0x91a, 0xb, "bafb0b6cb723731dd000181a036f60a0e48b30"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0) (async)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000180)={0x0, 0x5})

15:11:27 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5421, 0x0)

15:11:27 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
syz_open_pts(r0, 0x400000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_pts(r2, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a86847088d94d286022000003459a64a0"})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:27 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
syz_open_pts(r0, 0x400000) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)

15:11:27 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000000))

15:11:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x8, 0xf3f, 0x1ff, 0x9, 0xf6, "246fb573de7c9158523d0dc4f8709850c653ce", 0x7f, 0x401})
r3 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0x1}}, './file0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=@ipv6_newroute={0x3c, 0x18, 0x109, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x3c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c004}, 0x40800)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = dup3(r3, r7, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0x8)

15:11:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x80000)
epoll_pwait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x6, &(0x7f0000000140)={[0x1f]}, 0x8)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, 0x0, "717b2379e1b866d35927a6d58621e8506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x6680, 0x5, 0x1f, 0x91a, 0xb, "bafb0b6cb723731dd000181a036f60a0e48b30"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000180)={0x0, 0x5}) (rerun: 64)

[  591.364627][ T1054] IPv6: Can't replace route, no match found
15:11:28 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5422, 0x0)

15:11:28 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
syz_open_pts(r2, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a86847088d94d286022000003459a64a0"})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x333301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xb881, 0x0, 0x7, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r3, 0x1)

15:11:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x333301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xb881, 0x0, 0x7, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCCONS(r0, 0x541d) (async)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r3, 0x1)

15:11:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x333301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xb881, 0x0, 0x7, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCCONS(r0, 0x541d) (async)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000140)=r3, 0x1)

15:11:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0xfd1, 0xffffffd2, 0x0, 0x1, 0x3, "a5f34459c4da0fe806f75f9ee608f661f514e6", 0x100, 0xf8})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid', 0x30800, 0x165)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
epoll_pwait(r3, &(0x7f0000000180)=[{}, {}], 0x2, 0x100, &(0x7f00000001c0)={[0x4]}, 0x8)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x2000})
r8 = dup3(r1, r0, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:28 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000000))

15:11:28 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x8, 0xf3f, 0x1ff, 0x9, 0xf6, "246fb573de7c9158523d0dc4f8709850c653ce", 0x7f, 0x401})
r3 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0x1}}, './file0\x00'}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=@ipv6_newroute={0x3c, 0x18, 0x109, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x3c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c004}, 0x40800) (async)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = dup3(r3, r7, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0x8)

15:11:28 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000100)={{r0}, "b3719e9aff3128f0e6ca23fa15736f0c71810131b214f4729a3c1b67d3fd76bece5eaa1331227cdc1bc010ad103a63ce87ef168455e798f45be9741a2b0ee26ce36ea1c6ea2f91958ee9917cb0fe5c68f823d0d502e31f105cfb4aad26203a0db587f419aef5f8d0ed161047c48dd4ea94c63efa31bbdb42b053562ba30968d1928e05b4bcb6ac5b8e70867f0a705bbdc78a29a4d1c1a35a41d9d76c7d1267cf08bd0fb466a0233673f5b9ea05db3c0d115fe122df6d15aee2659685d75d5f2a384b225284d851f8710f9bd15238dc1ed51863b03bc22b66e85851081b71047b0aee1cf504cfa041754d16535659c2675800710a644d1e733c8dafaeeb4583b80126b9d71258aa671cb6e57f2b7d21b66ed089d5b102d08a94c700ef073a0cb08c67aeb4ff7917f7dc5627fffbc5aa289e97f31cd861212fd617757da25f16c58caf96ff6816ed598580f22c6c8d031d93ee753f68e9fde03e7ae63ec9f6ee6560ab960be7598c90c67e679133e123df92eb666d48eab0b898196fb68ddac0df86f265738f8faee30a3f4a26f4ca18ae030c1801426fe1f2445e16ac4076c9af327d68a0030bdb6b3f2add64183a104f606a9dfc929f301d21c3f0e8bb770b2cda84a36316b3ebf3bc589bc05897219034988d1ebd00e1276ef73369037e40af3823dc0f0e60e8c6b39bc5383aa638e844e8374927a54c3bec5f5d2683c331b31ba55ae90e762639221a93829b67c154a35c8bb60555b96254892774a5fd4f8227abea6a4b7bd3b17126eb9da72b44182e111ba99a1861dd1010e32301c000bbd7ca0b1e3b22c9ef76c8335f0364e1095506a29f2e9fb4c60b22d5eedacaf5b68e3188757191d9e3aa6274fbb138035fe662dd4820dccb27cce1e63a8faa9ff13e3dfe988fc5c6cc78a9c77ff1f1a847ce9c76bb5b28840acc7e597634d736fc1da4d20231d40570dcd6dac6aa9ddec1d302526b84221c376689d804845348c6d755844cf18a6f1e33310bb5758f619ff2197ed41ef1f59c4712843fcac169b31f394d4ad46a5c6f97f4763eda5f3c073962c8add1b1bb2aa08b07434aa27540a5549c9ee94adbbf30a64a6201bfd04212fcc73a562325089fb99f6be0fb91faa0c6af0f8e574e2b71f05b79ad811b259a8b5b252c77e1bc0ac22e060faca74f064b0720793b59d62b27633a7cc42859bc49d56f6c5996057c26771fa5861ce2300fdeb5f8d906d17df0a2016bfb80638717073a77411b6eabab527c36bee990c79516ddc137d3a87ef4e1e2003ad33e893159d7fab0f59de3ed2769df07b735f7649cdfd148820a8abfabc50338f5caeb93e43beb2eb443ebc214a4bd99023f6c690e3ac411b2e2b6ce1b0be5a732dbb13dc2cd36a2430737a3e7988f366fe891578d0e64cdd500db91387909e26f6dbf373b8fb9b65da1ceaea0b7b5a30e6f84a203cbb8ac1cfa557def207e5bf1d6ab43502f3d1a68fd83208f05d90cebabc6b55fdded4217e1613a79f803018bc5922ee46d10707ebd22a5595ef8ed305449779a6986143e9557d0fa68ac4795ec373d942ec5c5774536884de6feae7743fe1733e3e69393b92010a9138666dbbf3fbcc5e40bb23b5b5aa46547febb7da80e718253b54af38d949648faa87ad618a1e33eb1f52214e4b86118e2a301f5aa08955094f9c4a06c66164d2acdc0110c3c9a04cb7e860e8d2d60ad8590f8ef84fb740855ccc5125fa660bec6ddc0f9e9a24ab12e1690397fc49c09abb685997018afd65193fd6ebcb0fe22d98a387d3d850812e837e8d8a27f34076d503fdf8d12923a6c63be263977a9744b549364e171d60e88eed5e483842d817474c621c82b2f8f42baac389c2e8ed505953bacdec4458a7dcfe3de5ef4e57943ba6cb4aaffdf78b9d76de016b298e434be34f46ab711246c1a423ede205f13450a22873a41d4db7e79a185a7ec80eb4fa6cff0893fc5518a070c9c3272c07b890e18607c86eecc543b5addad4bb61e12c81ae018336a97aecb9707fe4fc39c57a650c9dd63a904b7ed4ef93f0c1c9c95a7cb5ab2f4de05bcee90ca1c92dd35f2b1e9a3421c1a4ffda485578c7ecf611881115c779c03ae7f97e834bd0af8dcf485c650c07eb9277365ea39b774a57e09e589c323a27186d002889b51aad76801e0416e74a221e7e431baf363612afa0aa6460aca20f7cd269a170211fc8c4d32e557d3d14b8011d399a1b79a51a038661ca6a2d206edfcc6e4fdb4703f1627653b04233e365153ee4ba4e4b9ef2d5e832629da73e23a6f3170350eafc4535099d7cda3790dbadddd19373c935b108092a0fcf8327e92031898e19e09c87b86c55c927ab73f9ea33fcc1eedfd6decb87f8a99ddf3aa6a5bdcc5b917ff53a5141600f96e298fced41ec2092c5fce4a2c499f3c3c001af8d8c97d649430c85a039a431e0e58c927c1eb508149ea2d3bf0bc598ca9e3fee1ff5bafe0e0b230e31660d3feb96be81e5664ca8b75c95353f2856f5bdff2a4bd6a1d9579cef1198c88210bdb34ccb8f2068094a2f40168f70235c2f24eaa0ea6ed666a404720c30eb08a0395ca053e284d99ebac76a871ba522af3de40751cfcae2864d2217c365b4befecb516ba82dc3f8fc353ba646e61efb19eb841a946493a8bd7234763edf79aafc305b7ed051ca6d3f0966e8558399ea42d3caf15501b42ccb2fdbbc1c0dc84f459c1c423620dd4bdc5d17ecd989e801b0009703ffcc91c7223aa7de2e3e72f73eb3f44dcd322243349a6d0c99837d9d34bf463253ab33aef6001e74dbfe28f376c26767dd4f676516b030b81b0b4a9a96a34a84e1d1bb1c8f8ecb3bbaaa9c5fed4b9082fd1cb353ab58d8e2c684ef5de7ab417edd580cc21fbd189c48df0ab99d53938429ba875586c8fb9da0eb5212fec658d28abbdaef4105ebf87de9eeab31f66356ac55ea392ebc2ccc6ef2527319b5f0c6609eda8e582206981a04eafd7f1449fbf2f446f13129d899521b5643078b0d8b82c09ad41185ea4643cd763d0f30c2de4ca2e2d6b45ca86a88de70241f5cdd0d7e4d34240eaf3a86b11a66b84fb000efa9661eedc6e6a970c61f943a09bfb94ca115fd4b9bb7941bde4bf04bb202447a79050b7681707646c0f426a569cc6b22717425494685855951de8d0b1a0ef6d71e0189153269d94435d3f7430336459f510d80f0e33090cd4fc3779063be4ece7edc05b7ee7e5ea20a763284f98b2acb29a2da7fbf4cd8ce1d17d64f5d8e8dea6bca99e8f2b2731570fb93a4ad51239533a7472f2bc01bf82351150654dfbbe57506ca9fe765949ecc3cf5a4440c949344bc5ba5372cc74fca90585fb3054caf5845f517370f7e9bdd493d31f33d036437c9961058de18ea222a9d7700cad7d91ab328942e40c600c5c3f0d26c341b73c8bb89498ab8dea4ab73e7205d7c0d30e00316c2eed619b1a2663d05f623c762af6448952ae8fe6ce68ade92f56b2b517a750ef970c75deb01fd471a27461cd8ef0cbdc8f8b5e6a5264aaf12d5c53b3b843bd15452bd7ddadcfbc8dfded4f04bd8c23e44351e15f5520e134cef2f788bc02e496d4dfb1d7a4727d53790fac23e9b00a337e2864c8cd07d7d6148edd8f7fd5bf60f1a1c5972519ab50b0ea3c0e185af798ff901374f0399ef0a6714c900e4ab0c5ddf6c8827036debbba99f649db720235a1ea2915f39588cd2efd48f91bff81ff6fe001f9dc4b9fe400af4742a07551814c44fabc76ae802ca9586c13d2ebf2f1cd9547bb9d5843d8c4d599d5284e59279aa0a4943eab47f22c8cf9ab7d9a2f4a805a7753d970de6f0d64e327dcfca916ef4e57e23c69d63bc2a301fca56e66589bef38250783cdde62df2f6be220549207f6b1da1b8783a564afa14698bc1e3621591207f83966ebe7fa2c2b988b86fe0038d442ee533a4089fefc499a1f7bff52aee8eec14f6382cfc986c29a1bd69e514d206fbb647639739e5653b43a68724a868dd1d710722e73da4104a6c22954c949f65ab40de95cf09f58adef30eb4abf9d2556d230aecf230bca41a0e759bff9e7039c7fa8afe4f79f85dd369cce801d87d54abd57bdd866e0aafb9348a77df43d6de2ca5ab095bce88deefe4914e0ac747551cb30e8ca02bb92c04e465de4aecf54caf0aea9a826bf93f12695f7589df4ea90570e058b32f6d52df7425482bd4dcf74fcdef5daa0622fd9ac3c4d1c87e63815b7d03df56f92da44793fd06ce67c7edb47b15a3dea0f5dc01615aa96771456be365a94a968a667ddd15051b6e2ae445dbe36ac6bc2a8ce3a2ccaf8b4eb61d4ee6952249aa2c675263fdfa8ceaee195b6566e3893d8817f9d69eb0a6eaac72bd18e8fd619add56be4447f16f7fea9f1df3581029f8ac78efa4863d76e7fa027a429709ae74a3fa4153a12152e9ca1fc7b76b3647dc11b948644857d2d9eabbea80ffcfb29f3a3c36f8d41cf4ca9814fa252942dd26743702ad053a9991eb9d492fb75aa607ff8f7a648f5e21471c0e9668b6a208e3b4e4ca10afe0c3bdb7651c501cf6964421c096f6328ca9843c709de26dfdc34887beff02d7942c462be46acbf9cc3f58ae8a4cf4ffdbd9a6081a2afc337fce64ddba6ac306b319e012e381b348b891e1284e5850e6f3c45371ba895697d4cc1356251e578009bd1115a021dcd9da6b9d0a6cfaa37d5e1e703434411583f8ee63da4c21b95a63844bee7079d3a234d9a7307ec62bebd7d11655ca1465811343ac94f1c03a162b6375110b0e9199c6de99ab6f22685ce61d8a753e315f864b024e546883f35b51267dd8490bdcada35344747dd2ea21b23cf7abf1a7a0c86356fc74af778a9f6b31ad2365326b3c4c3a1aca84816ecfaa772e21513899fe5d29bffd7a6e6d73340a2b19616bb963a39449a068fec8863be0622de13d06db1b46003c8fa400c31a8e81f1811c735e4b8421533768339d4f63602cfa111066f317fde18d6a31963de6a0fd6d36edfab01fea2df9cf4f38d50df6d56f929cadd33b0dea6750b1a05c8da3921acffa36f087fb80b8f4927cd82581fe1cefffcc378471bff7f7be684f168ce3b58fbe19534fd7917e93b5b65121ec13dc34e4e956037a9d0c702776853f525bc1ad7a1edbb9de0312ded54f21898e6956e6f20c5072f9168f11ff07d834d397b424c681dfe53ea5b6dc81edd83c049723be62c036d0eb5c6e54619ac89ce96a690a90ae29fe345332f3bf7bfedb1c4c31589a8b5644d683ba39079c469261309ba3df93acc1cdaa3ede0f8ed62dc43ae118c6ffab7fa5f2e8dd37106905db1e18622cc69daa804c7378781dc7e516a6fbb645c63b61f86855d47d6e36d15efd6629d86b1cfb078d5be1e98fb774f2af83d5fd8003a3d4dee80a6f300c82b56be1bfaf9344276cde716d934e59e0ba243ffd3df7fa391faa7fcbcc36991e517658d8e9bbfb8022fbfcfce78a41f52ea71ea1b33de7c82d91fc319a68c03144cf959f7d9d8b473bc8f55d572b4ad8b10cd518355edaff0ff3216a5edf0c42af3e9b23b0dc67ed8d6601328f4d16586907e8c9b8cf7043bf8ac76026f562141a8500f750a799de115a229a30497bdef2a37ede9bb3f1d69326137d09daef73ec275ad2e25159efe035b61285fdb9c107af61fb3a2aa5fb26263e222950b543f61d46bdc66a52efe423d5c2fee94d50b1dcc5b93a802d8a2f2fb3fe07e34f65188bd956e281f0463c8ce9b4a427d55502b03600183584ccf881ebc9651d99e29e541b4d39a1244d443dcdb0809b106eb0a698f89ab"})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x90002, 0x0)
ioctl$RTC_VL_CLR(r2, 0x7014)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

[  592.185319][ T1086] IPv6: Can't replace route, no match found
15:11:28 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5423, 0x0)

15:11:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
epoll_wait(r4, &(0x7f0000000080)=[{}, {}], 0x2, 0xff)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x9, 0x101, 0xc6b, 0x10000, 0x19, "0640001e1d1100a41d00000000000000040800"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
r7 = dup3(r6, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000140))
syz_open_pts(r7, 0x400001)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:29 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0) (async)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0xfd1, 0xffffffd2, 0x0, 0x1, 0x3, "a5f34459c4da0fe806f75f9ee608f661f514e6", 0x100, 0xf8}) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid', 0x30800, 0x165) (async)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
epoll_pwait(r3, &(0x7f0000000180)=[{}, {}], 0x2, 0x100, &(0x7f00000001c0)={[0x4]}, 0x8) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x2000}) (async, rerun: 32)
r8 = dup3(r1, r0, 0x0) (rerun: 32)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:29 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000000))

15:11:29 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x8, 0xf3f, 0x1ff, 0x9, 0xf6, "246fb573de7c9158523d0dc4f8709850c653ce", 0x7f, 0x401})
r3 = syz_open_pts(r0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0x1}}, './file0\x00'}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=@ipv6_newroute={0x3c, 0x18, 0x109, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x3c}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c004}, 0x40800)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = dup3(r3, r7, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0x8)

15:11:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) (async)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x90002, 0x0)
ioctl$RTC_VL_CLR(r2, 0x7014) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

[  592.968442][ T1125] IPv6: Can't replace route, no match found
15:11:29 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5424, 0x0)

15:11:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
epoll_wait(r4, &(0x7f0000000080)=[{}, {}], 0x2, 0xff)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x9, 0x101, 0xc6b, 0x10000, 0x19, "0640001e1d1100a41d00000000000000040800"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
r7 = dup3(r6, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000140))
syz_open_pts(r7, 0x400001)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) (async)
epoll_wait(r4, &(0x7f0000000080)=[{}, {}], 0x2, 0xff) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r5, r0, 0x0) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x9, 0x101, 0xc6b, 0x10000, 0x19, "0640001e1d1100a41d00000000000000040800"}) (async)
syz_open_pts(0xffffffffffffffff, 0x0) (async)
dup3(r6, r1, 0x80000) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000140)) (async)
syz_open_pts(r7, 0x400001) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:30 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0) (async)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0xfd1, 0xffffffd2, 0x0, 0x1, 0x3, "a5f34459c4da0fe806f75f9ee608f661f514e6", 0x100, 0xf8}) (async, rerun: 64)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid', 0x30800, 0x165) (async, rerun: 64)
r4 = epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
epoll_pwait(r3, &(0x7f0000000180)=[{}, {}], 0x2, 0x100, &(0x7f00000001c0)={[0x4]}, 0x8) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r6 = syz_open_pts(r5, 0x0) (rerun: 64)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x2000}) (async)
r8 = dup3(r1, r0, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
epoll_wait(r4, &(0x7f0000000080)=[{}, {}], 0x2, 0xff)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x9, 0x101, 0xc6b, 0x10000, 0x19, "0640001e1d1100a41d00000000000000040800"})
r6 = syz_open_pts(0xffffffffffffffff, 0x0)
r7 = dup3(r6, r1, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000140))
syz_open_pts(r7, 0x400001)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) (async)
epoll_wait(r4, &(0x7f0000000080)=[{}, {}], 0x2, 0xff) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r5, r0, 0x0) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x9, 0x101, 0xc6b, 0x10000, 0x19, "0640001e1d1100a41d00000000000000040800"}) (async)
syz_open_pts(0xffffffffffffffff, 0x0) (async)
dup3(r6, r1, 0x80000) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000140)) (async)
syz_open_pts(r7, 0x400001) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:30 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400040000c6b55477de53143e61483e5badb88001b44c85fdf7afbef01825177b3b1212eb0ec22926d9e13c92f3e57df3ae25f", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100020000001c00048005000300010000000500030006000068bae2021c000800020002000000"], 0x40}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x160, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15e8f0c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e0ed62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc0210f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1427cad8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120a6af2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c17a392}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66751654}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bc09fc2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a45df77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x361ca055}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a74214e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb526f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52ed9a6e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14360553}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x3c1986ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8921}, @NLBL_CIPSOV4_A_MLSCATREM={0x3, 0xa, 0x6eb4}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRES64=r4, @ANYRESDEC=r3, @ANYRES64=r4], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000000))
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="31dfe84a", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000065bba2b3029ec37b8486c27c8b4bb0782e943f1acacbf765c53d73b27c36bd288fa8325ee21d67be218dd1c5e89ee5273598d5d7fef093145a09424c3ada0cfbf9269981f18c4e68f9bc4eedde33bc7beabf4edf17cbfc5c10f651ba49ce57b5246b9e0ac2e7cebb1ba74a798b89fb1e122c26"], 0x14}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x270, r9, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7191e4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ca70d5f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5b20b8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23a4f943}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9fb6a5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616cd994}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557554b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6add48df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e6c9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f15324c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51848e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50aedf64}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341dd43d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4984b87e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ad806d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53b1bc97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa1dd07c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3372b138}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x343a4a8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x274b4f9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4897c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5514}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43503b2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x726e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x554e55e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75de8dc0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x753f09e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5697b25f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2642}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df68176}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x641330cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29364775}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaa6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf2a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x193f6410}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59b354e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57e317dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdfdeff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77c9979e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a3f0b70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20008011}, 0x8040)

15:11:30 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400040000c6b55477de53143e61483e5badb88001b44c85fdf7afbef01825177b3b1212eb0ec22926d9e13c92f3e57df3ae25f", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100020000001c00048005000300010000000500030006000068bae2021c000800020002000000"], 0x40}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x160, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15e8f0c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e0ed62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc0210f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1427cad8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120a6af2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c17a392}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66751654}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bc09fc2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a45df77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x361ca055}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a74214e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb526f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52ed9a6e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14360553}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x3c1986ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8921}, @NLBL_CIPSOV4_A_MLSCATREM={0x3, 0xa, 0x6eb4}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRES64=r4, @ANYRESDEC=r3, @ANYRES64=r4], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000000))
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="31dfe84a", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000065bba2b3029ec37b8486c27c8b4bb0782e943f1acacbf765c53d73b27c36bd288fa8325ee21d67be218dd1c5e89ee5273598d5d7fef093145a09424c3ada0cfbf9269981f18c4e68f9bc4eedde33bc7beabf4edf17cbfc5c10f651ba49ce57b5246b9e0ac2e7cebb1ba74a798b89fb1e122c26"], 0x14}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x270, r9, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7191e4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ca70d5f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5b20b8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23a4f943}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9fb6a5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616cd994}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557554b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6add48df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e6c9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f15324c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51848e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50aedf64}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341dd43d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4984b87e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ad806d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53b1bc97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa1dd07c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3372b138}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x343a4a8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x274b4f9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4897c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5514}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43503b2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x726e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x554e55e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75de8dc0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x753f09e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5697b25f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2642}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df68176}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x641330cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29364775}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaa6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf2a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x193f6410}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59b354e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57e317dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdfdeff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77c9979e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a3f0b70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20008011}, 0x8040)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400040000c6b55477de53143e61483e5badb88001b44c85fdf7afbef01825177b3b1212eb0ec22926d9e13c92f3e57df3ae25f", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100020000001c00048005000300010000000500030006000068bae2021c000800020002000000"], 0x40}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x160, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15e8f0c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e0ed62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc0210f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1427cad8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120a6af2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c17a392}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66751654}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bc09fc2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a45df77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x361ca055}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a74214e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb526f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52ed9a6e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14360553}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x3c1986ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8921}, @NLBL_CIPSOV4_A_MLSCATREM={0x3, 0xa, 0x6eb4}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRES64=r4, @ANYRESDEC=r3, @ANYRES64=r4], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r4, 0x0) (async)
dup3(r5, r4, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000000)) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="31dfe84a", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000065bba2b3029ec37b8486c27c8b4bb0782e943f1acacbf765c53d73b27c36bd288fa8325ee21d67be218dd1c5e89ee5273598d5d7fef093145a09424c3ada0cfbf9269981f18c4e68f9bc4eedde33bc7beabf4edf17cbfc5c10f651ba49ce57b5246b9e0ac2e7cebb1ba74a798b89fb1e122c26"], 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r8) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x270, r9, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7191e4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ca70d5f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5b20b8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23a4f943}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9fb6a5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616cd994}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557554b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6add48df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e6c9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f15324c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51848e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50aedf64}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341dd43d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4984b87e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ad806d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53b1bc97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa1dd07c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3372b138}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x343a4a8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x274b4f9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4897c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5514}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43503b2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x726e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x554e55e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75de8dc0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x753f09e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5697b25f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2642}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df68176}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x641330cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29364775}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaa6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf2a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x193f6410}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59b354e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57e317dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdfdeff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77c9979e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a3f0b70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20008011}, 0x8040) (async)

15:11:30 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80086601, &(0x7f0000000000))

15:11:30 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="400040000c6b55477de53143e61483e5badb88001b44c85fdf7afbef01825177b3b1212eb0ec22926d9e13c92f3e57df3ae25f", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100020000001c00048005000300010000000500030006000068bae2021c000800020002000000"], 0x40}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x160, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15e8f0c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e0ed62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dc0210f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1427cad8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120a6af2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c17a392}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66751654}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bc09fc2}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a45df77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x361ca055}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a74214e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb526f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52ed9a6e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14360553}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x3c1986ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8921}, @NLBL_CIPSOV4_A_MLSCATREM={0x3, 0xa, 0x6eb4}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRES64=r4, @ANYRESDEC=r3, @ANYRES64=r4], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSTI(r4, 0x541b, &(0x7f0000000000)) (async)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="31dfe84a", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000065bba2b3029ec37b8486c27c8b4bb0782e943f1acacbf765c53d73b27c36bd288fa8325ee21d67be218dd1c5e89ee5273598d5d7fef093145a09424c3ada0cfbf9269981f18c4e68f9bc4eedde33bc7beabf4edf17cbfc5c10f651ba49ce57b5246b9e0ac2e7cebb1ba74a798b89fb1e122c26"], 0x14}}, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x270, r9, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7191e4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ca70d5f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5b20b8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23a4f943}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9fb6a5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616cd994}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x557554b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6add48df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e6c9855}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f15324c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51848e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50aedf64}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341dd43d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4984b87e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ad806d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53b1bc97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa1dd07c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3372b138}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x343a4a8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x274b4f9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4897c}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5514}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43503b2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x726e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x554e55e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75de8dc0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x753f09e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5697b25f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2642}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df68176}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x641330cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29364775}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbaa6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf2a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x193f6410}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59b354e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57e317dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdfdeff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77c9979e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a3f0b70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20008011}, 0x8040)

15:11:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x4000, 0x0, 0xfffffffc, 0xfffffffe, 0x2, "136811cb430115000000000000cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, "08e3ff4fc58dd0ab0401fc0600"})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
connect$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x70000, 0x100)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f00000000c0)={0x200000, 0x10, 0x1}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x2ebaa9d6)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfe, "0040001e1d113c81fcf76000"})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140))
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)=0x9)
r7 = syz_open_pts(r6, 0x408080)
dup3(r7, r6, 0x0)
ioctl$TCFLSH(r6, 0x540b, 0x1)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000100)={{r0}, "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"})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x90002, 0x0)
ioctl$RTC_VL_CLR(r2, 0x7014)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x90002, 0x0) (async)
ioctl$RTC_VL_CLR(r2, 0x7014) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:30 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5425, 0x0)

15:11:30 executing program 0:
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1015, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), &(0x7f0000001440)={0x0, 0xfb, 0xaf, 0x1, 0x4, "93d9322dc54d7ede7689a9b1765b8c9d", "832f2f12022541a2d0bc1bcba218c506e314cbf6564d3ab0ed1863fc081bb5ad6bf7e47db80242523ea6b1547a11c1a6c7f0a5240680448b238e78a86806a89022423fec61729c8ba041f2430650ab372a03c200b6dfefad67311359ad7906af2b41ac066b1df2df5ed7b3eb955723637455b80df22bfd4754470206e126901008641c7bed8602fab2763425888dfbe1ef9e5e975c60f092a416"}, 0xaf, 0x1)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r1, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000011c0))
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001500)})

15:11:31 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80087601, &(0x7f0000000000))

15:11:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x4000, 0x0, 0xfffffffc, 0xfffffffe, 0x2, "136811cb430115000000000000cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, "08e3ff4fc58dd0ab0401fc0600"}) (async)
r1 = syz_open_pts(0xffffffffffffffff, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
connect$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x70000, 0x100) (async)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f00000000c0)={0x200000, 0x10, 0x1}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x2ebaa9d6) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfe, "0040001e1d113c81fcf76000"})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140))
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)=0x9) (async)
r7 = syz_open_pts(r6, 0x408080)
dup3(r7, r6, 0x0) (async)
ioctl$TCFLSH(r6, 0x540b, 0x1) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:31 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0) (async)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:31 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5427, 0x0)

15:11:31 executing program 0:
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1015, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), &(0x7f0000001440)={0x0, 0xfb, 0xaf, 0x1, 0x4, "93d9322dc54d7ede7689a9b1765b8c9d", "832f2f12022541a2d0bc1bcba218c506e314cbf6564d3ab0ed1863fc081bb5ad6bf7e47db80242523ea6b1547a11c1a6c7f0a5240680448b238e78a86806a89022423fec61729c8ba041f2430650ab372a03c200b6dfefad67311359ad7906af2b41ac066b1df2df5ed7b3eb955723637455b80df22bfd4754470206e126901008641c7bed8602fab2763425888dfbe1ef9e5e975c60f092a416"}, 0xaf, 0x1) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r1, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000011c0)) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001500)})

15:11:31 executing program 0:
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1015, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), &(0x7f0000001440)={0x0, 0xfb, 0xaf, 0x1, 0x4, "93d9322dc54d7ede7689a9b1765b8c9d", "832f2f12022541a2d0bc1bcba218c506e314cbf6564d3ab0ed1863fc081bb5ad6bf7e47db80242523ea6b1547a11c1a6c7f0a5240680448b238e78a86806a89022423fec61729c8ba041f2430650ab372a03c200b6dfefad67311359ad7906af2b41ac066b1df2df5ed7b3eb955723637455b80df22bfd4754470206e126901008641c7bed8602fab2763425888dfbe1ef9e5e975c60f092a416"}, 0xaf, 0x1)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r1, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000011c0))
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001500)})
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="00fb150203a940082094d953f8ac559b13ca0474221c22736fb75cd0aa87b1f05006d419bb027c91a16defd5ae710286a446d47aab9bd0e1b21d12c81a36702a090649b650b1ce26a91a13cffca3cd5c2de19aab1e876335639fc68aef0c2fc85581dca108345ec78701798fd7c7cd4c61eda1853a1b307746eafbdffef26cc235ba29612dfb7ea4f5de49e483a1fcbc10dd500621cd5ad55861f66406d5bc903d8eeaa3dba9f95123f3baf0a5818954c1ef3f5c8bf91e4be9a128a9834bb85146f3fb71b006fb72971f5b6505ffd55ea974070fee268a27751a1fe4bbc4ce9cff0755dbee619f1d7794c7fb93fd12da73044ccef25681f664835cbcd81c2b15fbdfd91278bd32d93ed341a242d9112fe262b166a1e12205158253ad47ef30c478243fe3435b5185b2dbcabd02337e38c6a1777d64351c0d0d756e8ffad462506de4e142f3128bbdcd13d016048ec13bb6c89347a6e2ec69673fb8fa57872ffecc8085e19accad5c65209511efeda9450b75a96ba5574f61e91cece1849eb0032146ae1cd7e87087fbcfd9d3aebb6f43fd96603f5917b6438b3c2bc65991590c4db85e1197b08a0b2f41bd3a4506a38a3b92e449d8504f52dfa05654ad0a185d16854a48881013568c4981df15f557c688c39ad6da1bec3cb9cfbdcf5bb96cd63d7021e255accc7d6ccedff9f4a4cbc5fc9eed5ed25056b3031bb4104ff763b8c282be2c15f179808ddadbeb0e498a70138b964b5f23a9a234614061c18a0086f4431dd57f86ada82e02de6b106660da2fed86ed035c11df4026f1d37fea7f9a52cf64b3babdc67b0dd1a667d2c1e79c8423dcfb0a115061be8daf2e0aed61f6361571d44fc676c5bd60ec0e956a523472ef880bfdbd3f1d13c1f03f98a1ddfa4be08e646e22e9f0ced8f29b538625544af6c159b7a8ca22a50d98f40a1fe5784a474db1f1273e5f5e9f0c286927ee87ede7647d98fbe6eeaaf5cbad4675cff80c1834ec7d3717d75458302d1b7a577a4ab80a8463b8875a41882880d282b88d80b224c8d259c0e21a02b3407157757cb48e7742afb08125df6233e6cfb1340854e741c807cba179a7bd0b5991d84c24a701df4a25343d6321b5835e36c69bd0640ffd47525a9540c28fc7456096e9a9fafc520cfb09ad22c34de79a30de0360e184c9754ea3798974072184d191c4f29e9f9d57093bb32aff6a8d7f84fdd7e37b5e3554b93ceb8e34002ff1081c1c4458e77b13b672cc8c48110d33fec62fcb58b1d2cb664f42f1f9de7ff37316d9a49cc25df3998b30f7653d67ed6fb5d792382b38b46c4365973676249d83cc5b9c41dd8ef394de91a59f179963af9925bb0873c8fe4946574b0f3f06bb9af0bada6db584da43cc9800f4403ab4cccb7e79c0f9d4e26dd44083291b5cd73c41c5b523e1f17edf889c4c1e46c80cd2cb63c234139f0ef339bbb0669c9c78ec723c709b39301a19571e801afd11b964aa3662a9f14a675a388ac9aca39499548e8c2393ffe5d8623e964e0f7f5f22fecc6d261a1bdea8b8c8871af1a247dc3efca4ffffcfe29bc5a4567ca42817717c344a86755dcbb34983bb4104da559bc80e6eea6e12a9957762df1ff07562f07b08a2118775bcfb99631bfa8f277d1d995ea15eb8df9fd628782f8218eab1feddf2b02c74017618b060073dc80ca53aaf56515bb5142742c6bda42424e5a42e8ae4c291b2b3b2deba0aa34f058b252fce02cd98aa917ec6bb89636b0c007f9f5d77eb05bafb1af3fd2dbd67d9e7db8d3bf120c96f81538c8a37f7e591c20f66f722ba0ffc7092e3a51de8fbeb2a6e3233c05351a999913709d92865a63249e3eebc6a4888d025ad51302e72d94b2a2d34bc24811bb476ae20e293cc52d524671b0c1b0dd6b8c8b7312220b150c3c0d179744921b4915e8e583aed667c2488168d7305f9e64098ea67671efd3ab082a94ac859f18854a8f0e787e6ddf688398b6263dfd3f96c59fbef0ca3a1afb7bac28764b29c0eda81b8054785de4876c2adfc9cbf83e38254ed79a101a38a396f8390a2e54fcb12597f53648a06a8568c29388639cdbaeb69e07fb14bd82554d6ad4aa7291b792ec768518797ec6012be24f6fdcd254a7d5de516fe7b5c498bf3f2b5361c87c818eeb47f2d2423a441d44b43138358f4a836bfcff0cf2d5cb65f923352befbed8b6426c137c38712858d1ecb597b5bc47297db7e612437a5aceee3d3a996d8fe0daa697aea3122b21400f6f9b236e57aef96e4826066bde7aeac61a8e1c23eefc836a840ce6f3ef719d0929cdd367e3554a051c813ea5403199d7589cae3a032175ab14185e839fa4c6ae753802b03e2d2bc0229715193818b218e1aef8772d2df44bc3a865bb3210fdab98ff48bccb8ec823a818c6177818f5300a9a19cbe52c61e1a91cf1ea6cca2aaebb7da295bac97c5a2030fa58fe1fdf15438a671a8df6380e1425fd13b4d884551b6ecb8b091362960cc6c812613dd305882975c8604e953855d45809347fb8ad1e5666290893f309f14866bec30497b83a1946f386d1bebfd7c7415f41201e4e977f5e471afa0691f316586c81338b55c2098f126ed43395365e2cc3137244c4b5bbeaf50d31800a79637520a098ea23be7197ca567cd7c201b7a46f87ff614a38363f1beaf81abdcc528c95b69664b0453f02fe017c68ca92bf07991864cfc8b31f4126b7057c5ace16ff7c18424799ea4780146b75980dce5bd3ea368a5f23d9a35fc5d2a9a9775df5a37ac76e1e0542dd916405e167adb746ef3de9b0aa6e073ae9a82ffeab18681b0cd59574f4bf4b311cbb2b05488ac29e9ec9b171b8954b817796b14395f6feee50081f3084bccb66889c68b13ef2ea8524bca9dd58b2df5421a400959d6cd275fe90bcdb67e1a74cbb52ea2e2be84039e8d1342bc73b30adb622923d7fc6aaec84d3b49e9ae2f90a0115e9f7609bba6c951e6dbd25cac59eebe3ba44a295051e03f16bd2b16018178467769c2cc7fd4ba5af74cddd9e54f6a72714e9d8d4b11eba8a2aedf8948f6425fdf4a14a86d1389afdce0f785175dcf4cf452afa20a0a4f271e3e742fd034c8cc11791bc13f961392aad6851a7351da5d7b354d3d033c4c7a255115079b1f5c74ec256142d7434e992fc546737d3164574b94fe6842ef5fc3f6f7388030ab564fcc9a599bf30b6ae9c7a5c1369f75de14ae856c57b11e7a7d6d2739a9a3433f894c4a59f69af549982290cdc2dac1413542b30e4d70bb0ac9cc5af0d635ce91016d072774689d4605b5ad78a236f49e2662c66885c293a82e6f103410ab5a7b84418ca3b83eca80049ac38e3a641c4951a294c8d7d52728f065c30c2adf43b674c324f8cf8695d274861247fcfc67e408d0b79961e1063fa78a41c7617b7abea3e08d399a0ac026dfbaa392c8003edbb30e7fb334dad29a51c3159653a6af4ef639378c0207ecd7815f438abf8b8fe319a02979c25777e91d9b3878c1028dcd80c549b16e597e8344fa1b66b98aff101b246dd13d08000da90396114ac76d61446e1221a8933369f04a43f4c4b224bdc2c0245f067d63032c6eec1f60db187625cc0806483d6f5c1ee5131a7643d9409db4e6e2cfd5f42df50f037021f0b4d78293592eeac2dfafe864d700d14ae469140057b9adf6186a9f5c04f86c5547c050d6b74e14afab7f44458a9a89c9c2d3e7997bec13a624cb01f8a30e5bf1cca610ddb584f77f2772f28d3a4f391f225ef67d1cfbc5f7e67edd423d906270c71d13abb3751d647f9352ea47b47b6c57dce7c6b789a449d20d6229a452c259a14f395285886fdba324802d957142ad946d8a9a8360dc53e82cee3f8a5a8b4103d55b8262f6f99712d2e06979115d106cff3fce62d6fd7f442625f2d9a5aeb0cd5eef6538163e5191afea8afa1b28a896b955971eb42bb3e35a872ebe73c5f87af0cf3bdbe69e9c90f5ad02f30793b1b575f25b194509858ae9816ffb1ab595a04d2cc31529b9245307beba5677ee53550b231692c171d921a2a5e09d57307ca13335ae5af2acb9600232441e3b98e2345c6fd6420fff322a29ec6c7e333ecc084c1f31f2718609efbced91c566e91d3202e8c3eb03f4b38af03f4c7e118407b123cbfea59163633dec348abadfc7560fed80d9133838b00dae02631e5760d5e8db1e746a6fc76ecad7a825b7dfb6dea2f3f1ce1b5c5d960394894439bf5186630930af9253e772255db200868656f3260ca6121bc3d7ffd6b95d2131da8dd8ce10dfcc07fde0bda624e1c985a2a6ec8b816d6f196df110ebe372ff214ec1d7f78cf38d2320bc188a64bacbb87efe54dc9390f8b59d3d1686ae91e67ab409207f353a3b0d889f8708cee49dd5b4a5b4a6bc719a945232b920cd91f2cca13e5bb5997a36383a55a44211ece9d5610a553a64f45a0d606f10bd8c711e647e16b058592877dc8b4d6e8e480e0086f577170ca6000613c1477b37e5ccf002e7579df4b49642f2d5c5d4627255164d505b6870c52323b753877ccddc49388327350f1760c4382728e8e33052f38dfda72023a8cf759a617e15ec39cbcf4c3413d08385b2d0a75213dc8508f622c49372df73e45a864daa584acef1039ff091e8f71d1139b859883928579329a3a4d5ac47e4b4b5d69655ab47b3cb094d851b47fb473bc5d4f2f7884895346b10077163fb5545812776edff74a44578a3442544c0012a3816f3efae3450e866170af8d8c4761fbe039d120a08e3ae2ec0be42836572139621aab0d2a3c4690a588c0ef449d5150a3198eb63ed38ffca40ab5c9a5a854509a0cf40acfd00066b8e6425f730cb264ab542bde610d75810b70a1a3c8b186538691630cdd46b0a93a02268f03baca918cb280463afe7770852f26e7ecdfd9ca6747d15640de77eff2167731c096a6b86360747275a120d1dbe72c03c74296fc800680be78705a8265d95b21e3003866d76bbab47c666754843a1d5187a9096b0582cde0dbb87ba258e5acf583f060b9112cc91c0ea3605968dc2fb35812fbfd32941061d1a118a732f0564d2269e3a2d93ef4e551e4c29beb04ac7c2ea5f5e7530b9cad5719901f7782aca7b38e60ed04b31b6c6ae0b09458749e585b09386ff8a0b9bf2c8af088ff74661e870f0f380053a18a2e38fa7dc0979dbcfcb4062089754b8a77c789db995f82a5aee3719d602556d7ec283ae975109192f17b0016186c2cb5c6e19a53dad8dbfbff131d4d6d2fe696386f5399c866cc3a74cf046244e03635907f1f964f1285479d30861900181de8574ca74ef1e85e68acc61c494fe12929596e95b1c1d4567385380d070cf142a5263beeb7417607c0abc25b71cb06991701c28d9cb5f91f13180eb56bad30f7f658a8864035d118105675666cfc93af47aa41a88f9238b6a1c582afe356d8abf1b0953dd59bf63193456ac510bd5e6022bda27434b8244bca736cfb9e5c3db1114a3639ca1e80a13c2994920c629d46bdf1e4135ade95df52c6965485d96e0b7e2a593b85614138e5d30acb6c772fcc3603718fbb8e47addd72511c1897e85542c4cc1f141fdbb3deb5c186f2fc9f204a2ceabe9c6a14ae1dea6376f05ff98ccd3401c4766fcf011243204c8f58183d10d27f000912894600c7d61fb77bc3967519207bc39104dc2aefe19120160422edb867a360354447d1755f3ac79d6bbf9a36ceffa13263781f250b8b93a8700e1ffbd6d528b978050b8b6653d8345b4cc405793312cbece10bf2e1d92ca38e9738c4d0888856bd12e8a70d3dd9dd711614f8cb138476be4c7df46c8f3fe9d79724721b27a"], 0x1015, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
setxattr$trusted_overlay_upper(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), &(0x7f0000001440)={0x0, 0xfb, 0xaf, 0x1, 0x4, "93d9322dc54d7ede7689a9b1765b8c9d", "832f2f12022541a2d0bc1bcba218c506e314cbf6564d3ab0ed1863fc081bb5ad6bf7e47db80242523ea6b1547a11c1a6c7f0a5240680448b238e78a86806a89022423fec61729c8ba041f2430650ab372a03c200b6dfefad67311359ad7906af2b41ac066b1df2df5ed7b3eb955723637455b80df22bfd4754470206e126901008641c7bed8602fab2763425888dfbe1ef9e5e975c60f092a416"}, 0xaf, 0x1) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r1, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000011c0)) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001500)}) (async)

15:11:32 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x801c581f, &(0x7f0000000000))

15:11:32 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x4000, 0x0, 0xfffffffc, 0xfffffffe, 0x2, "136811cb430115000000000000cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, "08e3ff4fc58dd0ab0401fc0600"})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
connect$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x70000, 0x100)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f00000000c0)={0x200000, 0x10, 0x1}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x2ebaa9d6)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfe, "0040001e1d113c81fcf76000"})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140))
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)=0x9)
r7 = syz_open_pts(r6, 0x408080)
dup3(r7, r6, 0x0)
ioctl$TCFLSH(r6, 0x540b, 0x1)
read$eventfd(r3, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x4000, 0x0, 0xfffffffc, 0xfffffffe, 0x2, "136811cb430115000000000000cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, "08e3ff4fc58dd0ab0401fc0600"}) (async)
syz_open_pts(0xffffffffffffffff, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
connect$l2tp(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x70000, 0x100) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f00000000c0)={0x200000, 0x10, 0x1}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x2ebaa9d6) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfe, "0040001e1d113c81fcf76000"}) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)=0x9) (async)
syz_open_pts(r6, 0x408080) (async)
dup3(r7, r6, 0x0) (async)
ioctl$TCFLSH(r6, 0x540b, 0x1) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)

15:11:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:32 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0) (rerun: 32)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:32 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
read$eventfd(r6, &(0x7f00000000c0), 0x8)

15:11:32 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

15:11:32 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x880, 0x0, 0x3, "00f7f709000000c40000002200"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:32 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000))

15:11:33 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffdef)

15:11:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x0, 0x80, 0x9, 0x7}]})
dup3(r0, r3, 0x80000)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x6, 0xdfff, 0x80000000, 0x0, 0x13, "999d506505a0008100000000000000090000f8"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x0, 0x40000000, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0) (async)
r3 = epoll_create1(0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
read$eventfd(r6, &(0x7f00000000c0), 0x8)

15:11:33 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5429, 0x0)

15:11:33 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x880, 0x0, 0x3, "00f7f709000000c40000002200"}) (async, rerun: 32)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 32)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:33 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x880, 0x0, 0x3, "00f7f709000000c40000002200"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:33 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000000))

15:11:33 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffdef)

15:11:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0) (async, rerun: 32)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x0, 0x80, 0x9, 0x7}]}) (rerun: 32)
dup3(r0, r3, 0x80000)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x6, 0xdfff, 0x80000000, 0x0, 0x13, "999d506505a0008100000000000000090000f8"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x0, 0x40000000, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:33 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0) (async)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
read$eventfd(r6, &(0x7f00000000c0), 0x8)

15:11:34 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5437, 0x0)

15:11:34 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7ffffffd, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:34 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000000))

15:11:34 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0xfffffdef)

15:11:34 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x0, 0x80, 0x9, 0x7}]})
dup3(r0, r3, 0x80000)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x6, 0xdfff, 0x80000000, 0x0, 0x13, "999d506505a0008100000000000000090000f8"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x0, 0x40000000, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x0, 0x80, 0x9, 0x7}]}) (async)
dup3(r0, r3, 0x80000) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x6, 0xdfff, 0x80000000, 0x0, 0x13, "999d506505a0008100000000000000090000f8"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x80, 0x0, 0x40000000, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:34 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x1)
read$eventfd(r3, &(0x7f0000000040), 0x8)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x5)

15:11:34 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5441, 0x0)

15:11:34 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0xfb, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = dup3(r0, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000040", @ANYRES16=r3, @ANYBLOB="010a0000000480"], 0x18}}, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "35e100"})
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100030000000000000017000000cbfd02800800f1ff020000000c000380000001000900000008000100fcffffff119a438ec0effc7fe3610812bc67b4a00b802206c8a7b56ba5f8364570fedd06203c8ec383427d1f36b83cdae91fd045f35922f1ba3518875d003b556ec84b63db01e4ffbd330a91433f"], 0x34}}, 0x4000010)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

[  598.410782][ T1381] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
15:11:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7ffffffd, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:35 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000000))

15:11:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:35 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0) (async)
ioctl$TCFLSH(r5, 0x540b, 0x1) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x5)

15:11:35 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5450, 0x0)

15:11:35 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0xfb, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
r1 = dup3(r0, r0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000040", @ANYRES16=r3, @ANYBLOB="010a0000000480"], 0x18}}, 0x0) (async)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "35e100"}) (async)
r4 = epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100030000000000000017000000cbfd02800800f1ff020000000c000380000001000900000008000100fcffffff119a438ec0effc7fe3610812bc67b4a00b802206c8a7b56ba5f8364570fedd06203c8ec383427d1f36b83cdae91fd045f35922f1ba3518875d003b556ec84b63db01e4ffbd330a91433f"], 0x34}}, 0x4000010) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

[  599.141169][ T1411] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
15:11:35 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0xfb, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = dup3(r0, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000040", @ANYRES16=r3, @ANYBLOB="010a0000000480"], 0x18}}, 0x0)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "35e100"})
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100030000000000000017000000cbfd02800800f1ff020000000c000380000001000900000008000100fcffffff119a438ec0effc7fe3610812bc67b4a00b802206c8a7b56ba5f8364570fedd06203c8ec383427d1f36b83cdae91fd045f35922f1ba3518875d003b556ec84b63db01e4ffbd330a91433f"], 0x34}}, 0x4000010)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0xfb, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
dup3(r0, r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000040", @ANYRES16=r3, @ANYBLOB="010a0000000480"], 0x18}}, 0x0) (async)
ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "35e100"}) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
dup3(r6, r5, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100030000000000000017000000cbfd02800800f1ff020000000c000380000001000900000008000100fcffffff119a438ec0effc7fe3610812bc67b4a00b802206c8a7b56ba5f8364570fedd06203c8ec383427d1f36b83cdae91fd045f35922f1ba3518875d003b556ec84b63db01e4ffbd330a91433f"], 0x34}}, 0x4000010) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async)

15:11:36 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080))

[  599.403700][ T1417] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
15:11:36 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7ffffffd, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 32)
r1 = epoll_create1(0x0) (async, rerun: 32)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:36 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:36 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:36 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0) (async, rerun: 32)
r2 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)
r3 = dup3(r1, r2, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0) (async)
ioctl$TCFLSH(r5, 0x540b, 0x1) (async, rerun: 64)
read$eventfd(r3, &(0x7f0000000040), 0x8) (rerun: 64)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x5)

15:11:36 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5451, 0x0)

15:11:36 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) (async)

15:11:37 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
fstat(r2, &(0x7f0000000140))
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:11:37 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)=0x59)

15:11:37 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:37 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r0, 0xc0800)
socket$l2tp(0x2, 0x2, 0x73)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

15:11:37 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5452, 0x0)

15:11:37 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080))

15:11:37 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0) (async)
fstat(r2, &(0x7f0000000140))
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:11:38 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x2)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r2, 0x0)
dup3(r5, r2, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x20, 0x8000, 0x7fffffff, 0x9, 0x1a, "79635a1d7af474c8a19fc336c7096256abcd19"})
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:38 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
syz_open_pts(0xffffffffffffffff, 0x200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r2, 0x0)
fstat(r2, &(0x7f0000000140))
r4 = dup3(r1, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)

15:11:38 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r0, 0xc0800)
socket$l2tp(0x2, 0x2, 0x73)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

15:11:38 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
syz_open_pts(0xffffffffffffffff, 0x200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:38 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x545d, 0x0)

15:11:38 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
syz_open_pts(0xffffffffffffffff, 0x200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:38 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340))
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xffffffff, 0x97, 0x100, 0x9, 0x19, "b3a3be7685cb1234293bfe938b8ffbf6b0688e"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140))
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0xd, 0x1c, 0x1d2, &(0x7f00000004c0)})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x7, 0xada}, 0x100, './file0\x00'})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

15:11:38 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0) (async)
ioctl$TCFLSH(r3, 0x540b, 0x2) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r5 = syz_open_pts(r2, 0x0)
dup3(r5, r2, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x20, 0x8000, 0x7fffffff, 0x9, 0x1a, "79635a1d7af474c8a19fc336c7096256abcd19"}) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:38 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x2) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r5 = syz_open_pts(r2, 0x0) (rerun: 32)
dup3(r5, r2, 0x0) (async)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x20, 0x8000, 0x7fffffff, 0x9, 0x1a, "79635a1d7af474c8a19fc336c7096256abcd19"})
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:38 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x4, 0x3, "ffffff7f00000000f3ff00"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:39 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000002", @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000000c0099000400000000000000"], 0x20}}, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x90c, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0xc000)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x5c, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0x0, 0x99, {0x10001, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xfd}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_OPMODE_NOTIF={0xfffffffffffffef4, 0xc2, 0x1f}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff80}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004014}, 0x40)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r8 = syz_open_pts(r7, 0x0)
dup3(r8, r7, 0x0)
ioctl$TIOCSTI(r7, 0x541b, &(0x7f0000000000))

15:11:39 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r0, 0xc0800)
socket$l2tp(0x2, 0x2, 0x73)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0xc0800) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) (async)

15:11:39 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5460, 0x0)

15:11:39 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x7, 0x5, 0x4, 0x0, 0x80000000})
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:39 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r1, 0x200)
r2 = dup3(0xffffffffffffffff, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340))
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xffffffff, 0x97, 0x100, 0x9, 0x19, "b3a3be7685cb1234293bfe938b8ffbf6b0688e"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140))
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0xd, 0x1c, 0x1d2, &(0x7f00000004c0)})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x7, 0xada}, 0x100, './file0\x00'})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340)) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xffffffff, 0x97, 0x100, 0x9, 0x19, "b3a3be7685cb1234293bfe938b8ffbf6b0688e"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) (async)
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0xd, 0x1c, 0x1d2, &(0x7f00000004c0)}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x7, 0xada}, 0x100, './file0\x00'}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)

15:11:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340))
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xffffffff, 0x97, 0x100, 0x9, 0x19, "b3a3be7685cb1234293bfe938b8ffbf6b0688e"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140))
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0xd, 0x1c, 0x1d2, &(0x7f00000004c0)})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x7, 0xada}, 0x100, './file0\x00'})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340)) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xffffffff, 0x97, 0x100, 0x9, 0x19, "b3a3be7685cb1234293bfe938b8ffbf6b0688e"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) (async)
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000008c0)={0x1, 0x0, 0xd, 0x1c, 0x1d2, &(0x7f00000004c0)}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x7, 0xada}, 0x100, './file0\x00'}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)

15:11:39 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x4, 0x3, "ffffff7f00000000f3ff00"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x4, 0x3, "ffffff7f00000000f3ff00"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r5, r0, 0x0) (async)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef) (async)

15:11:39 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup3(r3, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000140))
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x15)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:39 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000002", @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000000c0099000400000000000000"], 0x20}}, 0x0) (async)
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x90c, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0xc000) (async)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x5c, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0x0, 0x99, {0x10001, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xfd}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_OPMODE_NOTIF={0xfffffffffffffef4, 0xc2, 0x1f}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff80}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004014}, 0x40) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r8 = syz_open_pts(r7, 0x0)
dup3(r8, r7, 0x0) (async)
ioctl$TIOCSTI(r7, 0x541b, &(0x7f0000000000))

15:11:39 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x40049409, 0x0)

15:11:40 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x7, 0x5, 0x4, 0x0, 0x80000000}) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:40 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x4, 0x3, "ffffff7f00000000f3ff00"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r1, 0x200)
r2 = dup3(0xffffffffffffffff, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r3 = syz_open_pts(r2, 0x0) (rerun: 64)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup3(r3, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000140))
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x15) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (rerun: 64)

15:11:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup3(r3, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000140))
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x15) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 32)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (rerun: 32)

15:11:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4041, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r5, 0x0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRESDEC, @ANYBLOB="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"], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x7)

15:11:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) (async, rerun: 64)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4041, 0x0) (rerun: 64)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRESDEC, @ANYBLOB="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"], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x7)

15:11:40 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000002", @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000000c0099000400000000000000"], 0x20}}, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x90c, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0xc000)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x5c, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0x0, 0x99, {0x10001, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xfd}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_OPMODE_NOTIF={0xfffffffffffffef4, 0xc2, 0x1f}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff80}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004014}, 0x40)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r8 = syz_open_pts(r7, 0x0)
dup3(r8, r7, 0x0)
ioctl$TIOCSTI(r7, 0x541b, &(0x7f0000000000))
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000002", @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000000c0099000400000000000000"], 0x20}}, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x90c, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0xc000) (async)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x5c, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0x0, 0x99, {0x10001, 0x16}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xfd}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_OPMODE_NOTIF={0xfffffffffffffef4, 0xc2, 0x1f}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff80}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004014}, 0x40) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r7, 0x0) (async)
dup3(r8, r7, 0x0) (async)
ioctl$TIOCSTI(r7, 0x541b, &(0x7f0000000000)) (async)

15:11:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4041, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r5, 0x0)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRESDEC, @ANYBLOB="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"], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x7)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r4, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4041, 0x0) (async)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r5, 0x0) (async)
write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRESDEC, @ANYBLOB="db06e7e488efaee1ea85006aaf8105c82ab80a790e35f1efa90b4b23d69fa40fac77f5414ef58e6c608c45d9f596047acd1146b47d62039dae33cfa5faddf19b83ba122729eefc4a3983626780eb4691588e0d1b91e31c547fafd1da8a55df361a1f222e4934e5f2565a39cfa0017339e19faddca12696a5f877120106d4bebc0f17b82176ef5af39fdc7c8e6d8300c90d41f51d5fa69c55fa12a44dbf3b1cc3eafa018e995f9e55126e80604bd25bcd0cdbf14335f72ea3d3a626ceae875ee2ca82d0c4b6a55ababa4a7b04c416a7248e564207c572bf5c3b5561884aa102f56cf78774648b80247d03bf5a879eac0863cb4bc554f8aa52db044d553f5139954f8904993fc39a61cb4e7fc07226b5d295998fd3849c79f0a0e39839e346dd59d4040ac40b783c09891a59d2fff28994be1777fc564ea2406deb194acff53fd7a07d8641ac8160e6bbdcbacf3f860a61c9da1663fb994e34d36f8be9da0db58ff9a5d694e73d1b9040c264373b5ea829630e3f6bdb8c925faf9dd142e68591fc9be05f87ea97fc75bfe09c77425da0e6936bca51be4ea9c2740ac1309d5ffd7724dd8b05389a349c3418237e64a0da422de5b6b91adfbef353a91a076a64661f1db93692caa251ff75325bfa55cdb0f11c63304190ff5a3708e1c00fbd8f81c0e0c7d038f8bac29794afe1d936ee116791b1550e6a7335de976ca2b23be684c53ec57d526d7e1a0aed0cf38b57641ce4cb43d815c8f226a53c34be4718692bf27478fc1af8813a80ded6b9d1d39c78ed68eae9e254f6074967b1208efd17aac6ad5085f9c94f01462f3dd53f872c58369b05e668b0bf9e53a97a38b9d4da3b6be0d6e048031fe4c9d92cc59b8ce63ad7df6e54a059508d606af8f3ecf477c7d8ebff5e0de294dce9ed35aaa88f86965534f924a0a692f340ba99e246d671411be3f0560631f91de855eeb44c06f2aed343d6f5625013ffee00d2154e8d78bb08de9d47bfca96d7b861474a760e932ff59db9f858eb65df344268d23876e43b34f1e5717136ae5f01d45edbd2b30a4ebcdca3b2cb3a87542235e9c1505a9739e4c35fbe30ffaea82d0c3a4048d90a940b24219000233134bf65a8c63e065c28338cf0d22e57d0b89864997013a9a1b4cdf569e5f3a16de5c5000254bd902d231699714eb52e1a4bfff3b98d24dc5356fcff42a00efe638ec5e1910823be479e7feb6d9b7ff784443bcd991b1c520dbe81483aabe452c82a5d05e3b6dff55ee52d60732c6b1756a6dc02ab65de063e46bd17c2a0db9323415e4ad4f187635ec51d5f95c2ffb70a8e8c8eef6d52d2c04c4fd173e9fbddc6e15a03e52f77b03e2e0c7c6c3a04a2bbef8c805f81b31fcf5f4199da39281e52806fb5d6072b1285d58d96834d63223c242ddd05dcdcf9a7819a32690a4efd3be6f9357092f3f6326fee971fd19881f3a133e1293d6b6b61019e4ae27c786791794a7e0c36d271fae991f46454d5696819a9f2c0a21c0cb64d4497bc31632eb208c07925a82ea22a619494c6a2deae64047975e2dc8aaba195b5c8ef7fb92863f9e26c956cc90b601895c27d950d8c186d7cd2d51c5f88db2c69c3c48364721d29816f8be133857e0033fa4554a4668d480934bfb4897b6d4b4e184a5681621f9f0d8d233963f5b005f30d9cbb6a2b956a719b201378b4bc94612346fd73bf565e3707c6a9412d0e2c2c25b2bced1ac18fba87c881bb5dea150d7bd00c9454301c5984734c762ae7a84a41f8e81bbdfb3c6da5607f96b2a9da0987ba24f3f6157cdfc7c04cb34d3bc3658a88703c481a233ce8eabc99e6a405b2c58c8222ab80e1a106f677cbe4266ae03b92a1470e3e4ada92c9824465a1f0864aedbc3f3a489c5c12c4f9180047eb3f2a082e67118eb3dc1e54f85b39f0e73e384791dc6502863a6337333622e5865814861f7e67d190061dacde45d39f6c3cb6527db83ec0d8d224981322bbb00eb95a95f3db342ab68e1adf9e8ad4394bf59ce039f6114c53490b887c44b79e84e5bf66ff849cad1f93c71b4816b64cad0536adaabacdb95a4b02a344d2c0523b80cebec5f5f803912bd122e3fb4fec907567d1960eb5451f959d3da7761a43187681a73c24eafa0c1f04e95252b471a5bf0ce1d47b3efe59864296e7e2f478c73a9f49b9dcfe84a10ace34131f74998a94d974834d022974272218616cd814b1821e009024dd9a0d620188a9979b436804ba75bbc0998faeffb199f595ca3b2e860a9751de7c5f767a62eea0f2bf82e21da835572ba3f888e94cb148ee8da8df7f5e0adf12cf07366763a1a39e982483d13b91ff8710e11b0f12547f5040bd3160a10b27e621576aca93c7b520d909f5a5768bf8228d3deb2fb4c20e41b536cee0bb3ebee85a16c6c82ce81328e54c544cd43e1f27e8958f8b2933e55376cfe16f82cbbb37d23b362c201e03ccadecbcff4452233813228401b7b256687a4f1f8bbabb75fd9cfe4e535451c623e3669130c0d8299e438a089a423e4c4702ba65b25cc84cff11a86ff5a7550e9b9f88d9ea809dbd78325cbca9d17776412da0c6b04795629e0f92e4fcf0a3d3be57ee222c532b94e555faf491d64dfed37e438ea9fca39078bbd6fd535f302fa73fa545b6402e8b47f3f93e3e3baea2ee2d83e86da519719f45c73471d3084a2f92935aa50be02c8b93b1a93d5edb6c87c50204bf63ddd80dc65abcaed99598e4f130437b4e5d4a622fbdb47c8f8ce0b667c4481faea4f30ab040190984ac1e47329d7407274c1a24eae15029005f1e350d6ca568d3f4bd87f9789bad370879b9f3e20b98c20084f9f8aa0e5bc53441be7cbca61694372d5863c9b19fe1563c2aa2c644bb6bf4b18649ef485adbd1957ec2674b5096c05cc64c621dcfb68a540294afbf9b6007821ab96cf47299eb28ceeeda09a7a94693b67cc4888dccb473c52dbd152e81dda417e42e27813a9819ed026f64a3d4904f7edf6119f87b289fb34423029a8ad11fcf77145d3fea4713241f06dfe400fa0a89cc95030c724ecd1788b817c1e2296673c9baef568934752243431679a69c050a26a013aac5077207cb2d07bf341e9d729d745a6d47ce2b632020b64d129f3cc7c1a637166b307fa0394ae1f15405d09702392966bacd9aacef121cd211075eea2b2049b4caa3feb759903de0f9d27bcd691488ae01b758b9762443ada3eae6a5516375a2227b541ac871621ca28d59ba954ef96561ef97f26170a600fa2adc0c9c0fb87442eef97bca16b4208fb6e7455bdcee47039bddcbd2761f41671b3e5555f09914919cb8d6bbabd94df9cc7ea6d800c53f3f221dee144c48d0e9f6db401632817cd301bbfd53939f257bfd2e9308e8fb5b36c770a26da9d65f63d7d13077e70a0495f9e3b2adf8f16082bd733de6893fd584e88ffbb74f685e5744c87606adb7e0fa5df3cd11657069a43a815a041a31e9f8c4daf14a59d60462c49758489ac8b99d77766a0865d6f67c9ee62fc000e472c50e1ead2321b7870ac6a5165e37aafd6f05fc2d404ab728b33e92f29bd45da78f372bc4ba5d4fa0bdd2e0412725c261449a9b4ae9ba9f910aee4c166205df042e0232bcde109110c1959709fbaf587e118036c98fd578ce4c154ec7eeed39b8d4612406e76f7e87154c3ee1bdf789264f7c55d0aede0ee141eb153700644b5f48d25b359262c16e842725e170899fa6957c4dbfb45908b4c59b7d24305e8c5d4e687f7d649fe436e5d8c37bf626b8b2e68bca04522c443766e6f18a9c6c59a3f0bdc8d28cb6a09aa61573ef026f160b89f8aebdb8cd7de93cfc5baca42e2ff178134af53c750944f9f4b961bb1d12ac1298771e154df461d581930e6da5d9b301b09b9670e84ad6f18727b3c5c40c56c19225a6653be39ab0713a6fd14e8d3331e4283f7056c35dc4b848b892af7f23ae013ef6f1c11c83bf5a4506b681920a306ffebc6aa008b23146b60ebc9a1c4b35aea26b06c001e616922d99432415124bac2c26dbaba889d5abff79e737a1035cd2187d97244f785a9119a7f546a68bdda836cbf5f28bb2cb2891679a76066ddb9ced23a7f57e64fbdde1bb306aef01962d6fae2f5b5902dea1a81a34e8d2ce4c47e4499419c073edcd1e1f57e46dbb4dc3569c7a716eab53a53c477b3680ea3fa893847d66039a6725bc4cf0c7af562ea7e6c309019e66e0183d72de26aa02f334119e88dc9b85412887c24ab7794974823be5c8ebad5739a6b20bf577aa6eace462488f6149cc9464c40e3d0499913f518dddf5ce993bde79e7401d892e879024b239a5e1c0679846124cd3c39978e789f38950c8c57f4857b28e177e3b3082a7d90621419784501876760ea00de15a535bc68dbe470cadbca88bd0ed21841847d96c7093d35bc7689d9b4e45de313a8796d2dbe7c50d4b3ad241cdb8a8ea2679f22086958495a1183ff36d7a7b35700d59cc33380640fa93e7dd6a88e80181cdf6fe84a72aa6172c6996076da1a630704eccb913a0d5bf2baedb17e00abd38a294047a8953b09769dd3dabc695c9bd9bde26e63fd588c28c072cd6906e44d37b669b1c11b563025d3c6dd06b83f96b72b2753e6d13805e05a37de802695fd43f868d120d23143e2a314e774f1a9b2c74b6efff30fcefe10853c77d54102389ee0e46aa72b7d6373a258c6e4d7ba69bdb1aeeafaf25b95b51a8ce6ae670ab105ea808d6442a9b00dc652033f1313ce11d3e4aef6b18880c78cb3b3a1bf7cf747ff9c1017158f87ee72c7ad95e21536941874ac333f1981310212f4acd688d33797e8893f86a856790b889c35fc3d85924355cc08e47b5dc5727fb8e89c6b0e313795f8c351f1dd2272c2a017f9b33adaef3d2aa2c31005117a650cda971fd7948eee5f1098bfb66d8d3a422bd6ce8656f6e8af6053b1fd928d077b3b2347066aabe851c65a3d165a3473796c5910572422a95f676139405ab787156a33ad04050bc468ffee0004d7c24fa6256beb7232bdc00ff80b977b97b72ac85f8395a43c0f8335602cb64159e55438e2cab3eca6fb1184849d998ee74ac04b219506edbac7aa3cb4a3466e2e314f385e32fe52d4c4470f4839c6341b2e75b97de60de214466cdac3838acecd0860940d4ac3720015cef8f9bac36716527490307e5b2781b7a2c2b839b89df265cf4f3e44650162602ce515977b3dc1a1ed007ff904580332a579d571398cd52ce369c9c6a20033fd9071ed442ccd97bb3fd182304b37a871b63657e88f968efb2f496acdbac85101ac9ccb616d736391aa05ccaa792615790f41f7a9bdd38181c3df12fe7a57ebf76f2be22a59d644d81b2bf7ec613d26941ae3d211c2bc06e4180dff7496a408e1c755a2fd4a02cfc583cdb6d14f75ab82f568a533150e097b81e731bc1f7f522e7df722c8a8df01cca2bd3fd717eb9300ace29feaddcf52be27c6f3512bbe08d22b810dfcb936c8661fdf6ef430424b3da567d1797db8e73015faab2798c53d83366fea9281ab53f97045d50f736262f4807614771e47196f296967eae818e920a2adb503df7db88f4c6da648f57aebf2ed9137bf4788f423a52c2393b7163be7e1ac3b5e01f10988e0952946bdfa0fd01da7877ccc0b405f68c5b3a776ef402d1de9756169b09891ffdc2ff3a0e260398aec1373c7e68eec2dd0020a301b696b45083673078355f14aac7b7dfcbb8f81e0327de3f78c4917883325ab273c2c53bebdb6f216e4267bf0f2951f4c3b22f740d7fe62b3b7900a0"], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) (async)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x7) (async)

15:11:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xcc, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
close(r1)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x8, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:40 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x40086602, 0x0)

15:11:40 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = syz_open_pts(r0, 0x0) (async)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x7, 0x5, 0x4, 0x0, 0x80000000})
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:40 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14)

15:11:40 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0xffffff7f, 0x5, 0x10001, 0x2, 0x16, "3dc2fb55a6afe1f00da7de191d828fe058d3e1"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xffffffffffffffff})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2094}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7fffffff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffffd}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0xd4cdb2985aa65f3a)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000300))
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r1, 0x200)
r2 = dup3(0xffffffffffffffff, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:40 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 32)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) (rerun: 32)

[  604.229977][   T24] audit: type=1400 audit(1642605100.904:475): avc:  denied  { lock } for  pid=1701 comm="syz-executor.0" path="socket:[68251]" dev="sockfs" ino=68251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
15:11:41 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) (async)

15:11:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0xffffff7f, 0x5, 0x10001, 0x2, 0x16, "3dc2fb55a6afe1f00da7de191d828fe058d3e1"}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xffffffffffffffff}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2094}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7fffffff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffffd}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0xd4cdb2985aa65f3a)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000300)) (async)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:41 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC], 0x20}}, 0x8014)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0xffffff7f, 0x5, 0x10001, 0x2, 0x16, "3dc2fb55a6afe1f00da7de191d828fe058d3e1"}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xffffffffffffffff}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (rerun: 32)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2094}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7fffffff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffffd}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0xd4cdb2985aa65f3a)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000300)) (async)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:41 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000801308de97b16654eeb06d1e0f4e529f0083ad22c213794d77a51fa6fd12b868ae5a1098a5908bf0f58a202471a65ef5dee32573cfb8d250ab07938626d445151cdf6cd0b454b439da007d49b4397366c0f5e41aa26bf47ad1d5b96fcb37ea7bf173c5b4a33b2c05a12e2f70e3aca481e49614503bb41c0bb1e21204da2ed0ea917b3a252986a6b7817ce6f26962699b1080af1cfaf47aae9238d3b9d1b4676895ff5cb377212ad011b4ce0899b7477e92152d76a5bafbba45017ead97e32ddc0b754c96d8633dfe439e444beb9d6d9524a969cef0350f16d6afab754f033d03d234d7a1dd3eb25b405b26f0bfe864aa3194f07aad23ea9d8e0cb2a1", @ANYRES16=0x0, @ANYRESDEC], 0x20}}, 0x8014)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC], 0x20}}, 0x8014) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:41 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xcc, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
close(r1)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x8, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:41 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x40087602, 0x0)

15:11:41 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
syz_open_pts(r4, 0x703800)

15:11:41 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC], 0x20}}, 0x8014)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:41 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
syz_open_pts(0xffffffffffffffff, 0x200)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000fbd000000018447af5f644b774000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r4 = syz_open_pts(r2, 0x4042)
r5 = epoll_create1(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a040, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(0xffffffffffffffff, 0x400000)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'})
r9 = dup3(r4, r0, 0x0)
read$eventfd(r9, &(0x7f0000000040), 0xfffffdef)

15:11:42 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:42 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xcc, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
close(r1)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x8, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xcc, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
close(r1) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x8, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:42 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x401c5820, 0x0)

15:11:42 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
syz_open_pts(r4, 0x703800)

15:11:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
syz_open_pts(r4, 0x10000)

15:11:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
r2 = dup3(r1, 0xffffffffffffffff, 0x0) (async)
syz_open_pts(0xffffffffffffffff, 0x200) (async, rerun: 64)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000fbd000000018447af5f644b774000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r4 = syz_open_pts(r2, 0x4042)
r5 = epoll_create1(0x0) (async, rerun: 64)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a040, 0x0) (rerun: 64)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(0xffffffffffffffff, 0x400000)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140)) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'})
r9 = dup3(r4, r0, 0x0)
read$eventfd(r9, &(0x7f0000000040), 0xfffffdef)

15:11:42 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async, rerun: 64)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async, rerun: 64)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:43 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:43 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x4020940d, 0x0)

15:11:43 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
syz_open_pts(r4, 0x703800)

15:11:43 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (rerun: 64)
r1 = epoll_create1(0x0) (async, rerun: 64)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 64)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async, rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (rerun: 64)
syz_open_pts(r4, 0x10000)

15:11:43 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async, rerun: 64)
r1 = syz_open_pts(0xffffffffffffffff, 0x0) (rerun: 64)
r2 = dup3(r1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
syz_open_pts(0xffffffffffffffff, 0x200) (async, rerun: 64)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'}) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000fbd000000018447af5f644b774000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r4 = syz_open_pts(r2, 0x4042) (async)
r5 = epoll_create1(0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a040, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(0xffffffffffffffff, 0x400000)
r8 = dup3(r7, r6, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000140)) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async)
r9 = dup3(r4, r0, 0x0)
read$eventfd(r9, &(0x7f0000000040), 0xfffffdef)

15:11:43 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0xfffffffd, 0x0, 0x3f, 0x40, 0x3, "8ad5a31c2b052fa98b4dcf776bf2174ca4caef"})
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x1)
r6 = dup3(r5, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x6}}, './file0\x00'})
syz_open_pts(r7, 0x44000)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:43 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async, rerun: 32)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async, rerun: 32)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:43 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:44 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80045432, 0x0)

15:11:44 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080))
ioctl$TCFLSH(r1, 0x540b, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140))
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = dup3(r2, r3, 0x0)
syz_open_pts(r4, 0x40083)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
dup3(r6, r5, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0))
read$eventfd(r4, &(0x7f0000000040), 0x8)

15:11:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
syz_open_pts(r4, 0x10000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
syz_open_pts(r4, 0x10000) (async)

15:11:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "71eb0000407cf861a300000000000000002000"})
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080))

15:11:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "71eb0000407cf861a300000000000000002000"})
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080))

15:11:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "71eb0000407cf861a300000000000000002000"})
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "71eb0000407cf861a300000000000000002000"}) (async)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) (async)

15:11:44 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_pts(r2, 0x12100)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x1ff, 0x9b0, 0x6, 0x0, 0x2, "cc73e211478097184f482a7e8c6285c16eef97"})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x2, 0x4, 0xca6, 0x1, 0x1f, "b79f63a699311fa709150b2ca91704dfc37f70", 0x5, 0x40})

15:11:44 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0xfffffffd, 0x0, 0x3f, 0x40, 0x3, "8ad5a31c2b052fa98b4dcf776bf2174ca4caef"})
r3 = dup3(r2, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x1)
r6 = dup3(r5, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x6}}, './file0\x00'})
syz_open_pts(r7, 0x44000)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0xfffffffd, 0x0, 0x3f, 0x40, 0x3, "8ad5a31c2b052fa98b4dcf776bf2174ca4caef"}) (async)
dup3(r2, r1, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) (async)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r4, 0x0) (async)
ioctl$TCFLSH(r1, 0x540b, 0x1) (async)
dup3(r5, r4, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async)
syz_open_pts(r7, 0x44000) (async)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef) (async)

15:11:44 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:44 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0xfffffffd, 0x0, 0x3f, 0x40, 0x3, "8ad5a31c2b052fa98b4dcf776bf2174ca4caef"}) (async, rerun: 32)
r3 = dup3(r2, r1, 0x0) (rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 64)
r5 = syz_open_pts(r4, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x1) (async)
r6 = dup3(r5, r4, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x6}}, './file0\x00'}) (rerun: 64)
syz_open_pts(r7, 0x44000) (async)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:45 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80045440, 0x0)

15:11:45 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080))
ioctl$TCFLSH(r1, 0x540b, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140)) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (rerun: 32)
r2 = syz_open_pts(r0, 0x0) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = dup3(r2, r3, 0x0)
syz_open_pts(r4, 0x40083) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
dup3(r6, r5, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)) (async)
read$eventfd(r4, &(0x7f0000000040), 0x8)

15:11:45 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async, rerun: 64)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
syz_open_pts(r2, 0x12100) (async)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x1ff, 0x9b0, 0x6, 0x0, 0x2, "cc73e211478097184f482a7e8c6285c16eef97"})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x2, 0x4, 0xca6, 0x1, 0x1f, "b79f63a699311fa709150b2ca91704dfc37f70", 0x5, 0x40})

15:11:45 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x3, 0x8, 0x7, 0x1a, "001a44869b4a0aaaa600"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
r3 = syz_open_pts(r0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r4, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x5)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r4, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)

15:11:45 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80086601, 0x0)

15:11:45 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080))
ioctl$TCFLSH(r1, 0x540b, 0x2)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140))
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = dup3(r2, r3, 0x0)
syz_open_pts(r4, 0x40083) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
dup3(r6, r5, 0x0) (async)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000000c0)) (async)
read$eventfd(r4, &(0x7f0000000040), 0x8)

15:11:46 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
syz_open_pts(r2, 0x12100)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x1ff, 0x9b0, 0x6, 0x0, 0x2, "cc73e211478097184f482a7e8c6285c16eef97"})
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x2, 0x4, 0xca6, 0x1, 0x1f, "b79f63a699311fa709150b2ca91704dfc37f70", 0x5, 0x40})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
syz_open_pts(r2, 0x12100) (async)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x1ff, 0x9b0, 0x6, 0x0, 0x2, "cc73e211478097184f482a7e8c6285c16eef97"}) (async)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x2, 0x4, 0xca6, 0x1, 0x1f, "b79f63a699311fa709150b2ca91704dfc37f70", 0x5, 0x40}) (async)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x10000, 0x0)
read$msr(r1, &(0x7f0000000100)=""/30, 0x1e)
syz_open_pts(r0, 0x3285)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:46 executing program 4:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r0 = syz_open_pts(0xffffffffffffffff, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r1, 0x200)
r2 = dup3(r0, 0xffffffffffffffff, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r0 = syz_open_pts(0xffffffffffffffff, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r1, 0x200)
r2 = dup3(r0, 0xffffffffffffffff, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r0 = syz_open_pts(0xffffffffffffffff, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r1, 0x200)
r2 = dup3(r0, 0xffffffffffffffff, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x3, 0x8, 0x7, 0x1a, "001a44869b4a0aaaa600"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
r3 = syz_open_pts(r0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r4, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x5)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r4, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x3, 0x8, 0x7, 0x1a, "001a44869b4a0aaaa600"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) (async)
syz_open_pts(r0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r4, 0x0) (async)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x5) (async)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
dup3(r3, r4, 0x0) (async)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef) (async)

15:11:46 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x80087601, 0x0)

15:11:46 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
r4 = epoll_create1(0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000080))
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x10000, 0x0) (rerun: 32)
read$msr(r1, &(0x7f0000000100)=""/30, 0x1e) (async)
syz_open_pts(r0, 0x3285) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async, rerun: 64)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfffffffc, 0x3, 0x8, 0x7, 0x1a, "001a44869b4a0aaaa600"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
r3 = syz_open_pts(r0, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_pts(r4, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x5) (async)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = dup3(r3, r4, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 3:
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, r0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, r0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r1, 0x541b, &(0x7f0000000000))

15:11:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0) (async)
r4 = epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140))
ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000080)) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:47 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x801c581f, 0x0)

15:11:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:48 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x10000, 0x0)
read$msr(r1, &(0x7f0000000100)=""/30, 0x1e)
syz_open_pts(r0, 0x3285)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x10000, 0x0) (async)
read$msr(r1, &(0x7f0000000100)=""/30, 0x1e) (async)
syz_open_pts(r0, 0x3285) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:11:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="0002000005000000ce2e2f66696c653000"])
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000140)=0x7)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:48 executing program 3:
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, r0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, r0) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0) (async)
ioctl$TIOCSTI(r1, 0x541b, &(0x7f0000000000))

15:11:48 executing program 1:
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80800)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))

15:11:48 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc0045878, 0x0)

15:11:48 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0) (async)
r4 = epoll_create1(0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)) (async, rerun: 64)
ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000080)) (rerun: 64)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:49 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (rerun: 64)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="0002000005000000ce2e2f66696c653000"]) (async)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000140)=0x7) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:49 executing program 3:
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, r0) (async)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, r0) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0) (async)
ioctl$TIOCSTI(r1, 0x541b, &(0x7f0000000000))

15:11:49 executing program 1:
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80800)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async)
accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80800) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) (async)

15:11:49 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="0002000005000000ce2e2f66696c653000"]) (async)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000140)=0x7)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:49 executing program 1:
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80800)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async)
accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80800) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x800000, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) (async)

15:11:49 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc0045878, 0x0)

15:11:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7, 0x7e5, 0x7ff, 0x0, 0xb, "1fa7ce319c85cde5a4a2f88b03f0a8f0e800"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r1, 0x0)
dup3(r2, r3, 0x0)

15:11:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7, 0x7e5, 0x7ff, 0x0, 0xb, "1fa7ce319c85cde5a4a2f88b03f0a8f0e800"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r1, 0x0)
dup3(r2, r3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7, 0x7e5, 0x7ff, 0x0, 0xb, "1fa7ce319c85cde5a4a2f88b03f0a8f0e800"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r1, 0x0) (async)
dup3(r2, r3, 0x0) (async)

15:11:49 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7, 0x7e5, 0x7ff, 0x0, 0xb, "1fa7ce319c85cde5a4a2f88b03f0a8f0e800"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r1, 0x0)
dup3(r2, r3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7, 0x7e5, 0x7ff, 0x0, 0xb, "1fa7ce319c85cde5a4a2f88b03f0a8f0e800"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r1, 0x0) (async)
dup3(r2, r3, 0x0) (async)

15:11:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:49 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:50 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
syz_open_pts(r4, 0x1c9c83)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:50 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x10, 0x1, 0x82, &(0x7f0000000140)})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080))
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
syz_open_pts(r3, 0x40)
r5 = dup3(r1, r2, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)

15:11:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x10000, 0x3ff, 0x9, 0x80000000, 0x15, "e314000397c43fdf6fa99ecd3ece3589fc965e"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xe7, 0x7, 0x3, 0x6, 0x9, "207d0df6cefa98b8e61c484a84756807107ed2"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:50 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc0189436, 0x0)

15:11:50 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:11:50 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:50 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1001000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}, {@uname={'uname', 0x3d, '/dev/ptmx\x00'}}, {@access_user}, {@access_client}, {@access_any}, {@access_client}, {@cache_loose}, {@mmap}, {@posixacl}], [{@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@fsname={'fsname', 0x3d, '+.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsname={'fsname', 0x3d, '&'}}]}})

15:11:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:50 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = epoll_create1(0x0) (async, rerun: 64)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 64)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
syz_open_pts(r4, 0x1c9c83) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:50 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x10, 0x1, 0x82, &(0x7f0000000140)})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080))
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
syz_open_pts(r3, 0x40)
r5 = dup3(r1, r2, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x10, 0x1, 0x82, &(0x7f0000000140)}) (async)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080)) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
syz_open_pts(r3, 0x40) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r5, &(0x7f0000000040), 0x8) (async)

15:11:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x10000, 0x3ff, 0x9, 0x80000000, 0x15, "e314000397c43fdf6fa99ecd3ece3589fc965e"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xe7, 0x7, 0x3, 0x6, 0x9, "207d0df6cefa98b8e61c484a84756807107ed2"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:51 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0xc020660b, 0x0)

15:11:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
syz_open_pts(r4, 0x1c9c83) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r5 = syz_open_pts(r0, 0x0)
r6 = dup3(r5, r0, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0xfffffdef)

15:11:51 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r1 = syz_open_pts(r0, 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x10, 0x1, 0x82, &(0x7f0000000140)})
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080)) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
syz_open_pts(r3, 0x40) (async)
r5 = dup3(r1, r2, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)

15:11:51 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1001000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}, {@uname={'uname', 0x3d, '/dev/ptmx\x00'}}, {@access_user}, {@access_client}, {@access_any}, {@access_client}, {@cache_loose}, {@mmap}, {@posixacl}], [{@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@fsname={'fsname', 0x3d, '+.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsname={'fsname', 0x3d, '&'}}]}})

15:11:51 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x10000, 0x3ff, 0x9, 0x80000000, 0x15, "e314000397c43fdf6fa99ecd3ece3589fc965e"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xe7, 0x7, 0x3, 0x6, 0x9, "207d0df6cefa98b8e61c484a84756807107ed2"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:51 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)
r3 = epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {<r4=>r2}}, './file0\x00'})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={<r8=>0x0, 0xf1, 0x30, 0x8fec, 0x9}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e24, 0x2, @empty, 0x4}}}, 0x84)

15:11:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r2, r6})

15:11:51 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
syz_open_pts(r3, 0x80)
r4 = dup3(r1, r2, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0x8)

15:11:52 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1001000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}, {@uname={'uname', 0x3d, '/dev/ptmx\x00'}}, {@access_user}, {@access_client}, {@access_any}, {@access_client}, {@cache_loose}, {@mmap}, {@posixacl}], [{@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@fsname={'fsname', 0x3d, '+.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsname={'fsname', 0x3d, '&'}}]}})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r4, 0x0) (async)
dup3(r5, r4, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1001000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}, {@uname={'uname', 0x3d, '/dev/ptmx\x00'}}, {@access_user}, {@access_client}, {@access_any}, {@access_client}, {@cache_loose}, {@mmap}, {@posixacl}], [{@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@fsname={'fsname', 0x3d, '+.'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@fsname={'fsname', 0x3d, '&'}}]}}) (async)

15:11:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:52 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000007ba594c5868d45f64473a46173ca54800c0099000400000000000000"], 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x400, 0xc0, 0x4}, 0x18)
fsetxattr$security_ima(r1, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x2, ')='}, 0x4, 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:52 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 32)
r1 = syz_open_pts(r0, 0x0) (rerun: 32)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0) (async, rerun: 32)
r3 = epoll_create1(0x0) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {<r4=>r2}}, './file0\x00'})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x3) (async, rerun: 64)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 64)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140)) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={<r8=>0x0, 0xf1, 0x30, 0x8fec, 0x9}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e24, 0x2, @empty, 0x4}}}, 0x84)

15:11:52 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 32)
r1 = syz_open_pts(r0, 0x0) (rerun: 32)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (rerun: 32)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r2, r6})

15:11:52 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
syz_open_pts(r3, 0x80)
r4 = dup3(r1, r2, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
pipe(&(0x7f0000000080)) (async)
syz_open_pts(r3, 0x80) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r4, &(0x7f0000000040), 0x8) (async)

15:11:52 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73) (async)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
syz_open_pts(r3, 0x80) (async)
r4 = dup3(r1, r2, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0x8)

15:11:53 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)
r3 = epoll_create1(0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r2, r6})

15:11:53 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0)
r4 = io_uring_setup(0x63d5, &(0x7f0000000000))
r5 = io_uring_setup(0x1564, &(0x7f0000000380)={0x0, 0x2000d632, 0x0, 0x8003, 0x110})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x20000000, r6)
syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x100, 0x400, 0x1, {0x0, r6}}, 0x5)
r7 = syz_open_pts(r0, 0x0)
r8 = dup3(r7, r0, 0x0)
write(r7, &(0x7f0000000140)="1c6d8bf55b420616d82ab6fa9933139285141b3dab5aa33d573d0888470c9ab45011f432a9011085914bd04b2d64da1756b36b27519715673538149a1e8be06469c5a66c41f7fa792c7dce20a4ca7fe229f84d6711cbb0279bd23fb007e0d08d6ab09bd237b274a603b7a5369750cc899aea7a3477512dbd8c66fdbd8a09be3c294fdacf279dd1ab7491af54c8929956afc25a7a1f4db29b50c746b4ab5a0af16e967aa4897681b4749f416170b0088d873165530e048432245f936dd3104bb6e8e3e670b4d78a0ce3d673041c0759ab0b1bba106ed4414a12c1", 0xda)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:53 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000007ba594c5868d45f64473a46173ca54800c0099000400000000000000"], 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x400, 0xc0, 0x4}, 0x18)
fsetxattr$security_ima(r1, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x2, ')='}, 0x4, 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:53 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async, rerun: 32)
r1 = syz_open_pts(r0, 0x0) (rerun: 32)
r2 = dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0)
r3 = epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {<r4=>r2}}, './file0\x00'})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r6 = syz_open_pts(r5, 0x0)
r7 = dup3(r6, r5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={<r8=>0x0, 0xf1, 0x30, 0x8fec, 0x9}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e24, 0x2, @empty, 0x4}}}, 0x84)

15:11:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:53 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x400, 0xfffffffe, 0xf, "0040001e1d113c81fcf76000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x9)
r3 = syz_open_pts(r0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = dup3(r3, r4, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)

15:11:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, 0x0)
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async, rerun: 64)
syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0) (async, rerun: 64)
r3 = socket$kcm(0x29, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async)
r4 = io_uring_setup(0x63d5, &(0x7f0000000000)) (async)
r5 = io_uring_setup(0x1564, &(0x7f0000000380)={0x0, 0x2000d632, 0x0, 0x8003, 0x110})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x20000000, r6)
syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x100, 0x400, 0x1, {0x0, r6}}, 0x5) (async)
r7 = syz_open_pts(r0, 0x0)
r8 = dup3(r7, r0, 0x0)
write(r7, &(0x7f0000000140)="1c6d8bf55b420616d82ab6fa9933139285141b3dab5aa33d573d0888470c9ab45011f432a9011085914bd04b2d64da1756b36b27519715673538149a1e8be06469c5a66c41f7fa792c7dce20a4ca7fe229f84d6711cbb0279bd23fb007e0d08d6ab09bd237b274a603b7a5369750cc899aea7a3477512dbd8c66fdbd8a09be3c294fdacf279dd1ab7491af54c8929956afc25a7a1f4db29b50c746b4ab5a0af16e967aa4897681b4749f416170b0088d873165530e048432245f936dd3104bb6e8e3e670b4d78a0ce3d673041c0759ab0b1bba106ed4414a12c1", 0xda) (async)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, 0x0)
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:54 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000007ba594c5868d45f64473a46173ca54800c0099000400000000000000"], 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, 0x0)
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x400, 0xc0, 0x4}, 0x18)
fsetxattr$security_ima(r1, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x2, ')='}, 0x4, 0x1) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:11:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:54 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x400, 0xfffffffe, 0xf, "0040001e1d113c81fcf76000"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x9)
r3 = syz_open_pts(r0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = dup3(r3, r4, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x400, 0xfffffffe, 0xf, "0040001e1d113c81fcf76000"}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x9) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r3, r4, 0x0) (async)
read$eventfd(r5, &(0x7f0000000040), 0x8) (async)

15:11:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:54 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x400, 0xfffffffe, 0xf, "0040001e1d113c81fcf76000"}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x9)
r3 = syz_open_pts(r0, 0x0) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = dup3(r3, r4, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)

15:11:54 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={0x40, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}]}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6b8e5c131fbf5aae3601f57ac2c2", @ANYRES16=0x0, @ANYBLOB="000000000000000000008200000008000300", @ANYRES32=r2, @ANYBLOB="1c00990004000000df000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x7c, r4, 0x402, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3b, 0x25}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "4316f8ee20fe4d5af08bbc5b79f999fb"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ca3b7c5218520647d09ab932be432867"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5db9d2dff8475397b5b9a8127a8bd345"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e6702080fe2e1df45711e25ee0159c8a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc054}, 0x4040010)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e)
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
ioctl$TIOCSTI(r6, 0x541b, 0x0)

15:11:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async)
r4 = io_uring_setup(0x63d5, &(0x7f0000000000))
r5 = io_uring_setup(0x1564, &(0x7f0000000380)={0x0, 0x2000d632, 0x0, 0x8003, 0x110})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x4, 0x20000000, r6) (async)
syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x100, 0x400, 0x1, {0x0, r6}}, 0x5) (async)
r7 = syz_open_pts(r0, 0x0)
r8 = dup3(r7, r0, 0x0)
write(r7, &(0x7f0000000140)="1c6d8bf55b420616d82ab6fa9933139285141b3dab5aa33d573d0888470c9ab45011f432a9011085914bd04b2d64da1756b36b27519715673538149a1e8be06469c5a66c41f7fa792c7dce20a4ca7fe229f84d6711cbb0279bd23fb007e0d08d6ab09bd237b274a603b7a5369750cc899aea7a3477512dbd8c66fdbd8a09be3c294fdacf279dd1ab7491af54c8929956afc25a7a1f4db29b50c746b4ab5a0af16e967aa4897681b4749f416170b0088d873165530e048432245f936dd3104bb6e8e3e670b4d78a0ce3d673041c0759ab0b1bba106ed4414a12c1", 0xda)
read$eventfd(r8, &(0x7f0000000040), 0xfffffdef)

15:11:55 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x100800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x24080000}, 0x40048c4)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r6 = syz_open_pts(r0, 0x0)
dup3(r6, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x7, 0x7, 0x20, 0xffff, 0x16, "91e86f0daff63f6dbb0ea47fce4d09ac0bff13"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080))

15:11:55 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:55 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={0x40, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}]}]}, 0x40}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6b8e5c131fbf5aae3601f57ac2c2", @ANYRES16=0x0, @ANYBLOB="000000000000000000008200000008000300", @ANYRES32=r2, @ANYBLOB="1c00990004000000df000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x58}}, 0x24008001) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x7c, r4, 0x402, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3b, 0x25}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "4316f8ee20fe4d5af08bbc5b79f999fb"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ca3b7c5218520647d09ab932be432867"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5db9d2dff8475397b5b9a8127a8bd345"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e6702080fe2e1df45711e25ee0159c8a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc054}, 0x4040010) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e)
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0) (async)
ioctl$TIOCSTI(r6, 0x541b, 0x0)

15:11:55 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001540)={0x4000200a})
ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000540)=""/4096)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xb, 0x27, &(0x7f0000000140)})
r6 = syz_open_pts(r0, 0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r6, r7, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

15:11:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x84200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:55 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x100800) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001) (async)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x24080000}, 0x40048c4) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r6 = syz_open_pts(r0, 0x0)
dup3(r6, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x7, 0x7, 0x20, 0xffff, 0x16, "91e86f0daff63f6dbb0ea47fce4d09ac0bff13"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x7, 0x7, 0x20, 0xffff, 0x16, "91e86f0daff63f6dbb0ea47fce4d09ac0bff13"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) (async)

15:11:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x7, 0x7, 0x20, 0xffff, 0x16, "91e86f0daff63f6dbb0ea47fce4d09ac0bff13"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r2, 0x0) (async)
dup3(r3, r2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x7, 0x7, 0x20, 0xffff, 0x16, "91e86f0daff63f6dbb0ea47fce4d09ac0bff13"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) (async)

15:11:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:56 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={0x40, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}]}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6b8e5c131fbf5aae3601f57ac2c2", @ANYRES16=0x0, @ANYBLOB="000000000000000000008200000008000300", @ANYRES32=r2, @ANYBLOB="1c00990004000000df000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}]}]}, 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x7c, r4, 0x402, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3b, 0x25}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "4316f8ee20fe4d5af08bbc5b79f999fb"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ca3b7c5218520647d09ab932be432867"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5db9d2dff8475397b5b9a8127a8bd345"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e6702080fe2e1df45711e25ee0159c8a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc054}, 0x4040010)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0) (async, rerun: 64)
ioctl$TIOCSTI(r6, 0x541b, 0x0) (rerun: 64)

15:11:56 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001540)={0x4000200a}) (async)
ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000540)=""/4096)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xb, 0x27, &(0x7f0000000140)}) (async)
r6 = syz_open_pts(r0, 0x0) (async)
r7 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r6, r7, 0x0) (async)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

[  619.759873][ T2544] ==================================================================
[  619.767965][ T2544] BUG: KCSAN: data-race in n_tty_write / tty_reopen
[  619.774548][ T2544] 
[  619.776876][ T2544] write to 0xffff88810711f5a8 of 4 bytes by task 2547 on cpu 1:
[  619.784500][ T2544]  tty_reopen+0x114/0x1c0
[  619.788818][ T2544]  tty_open+0x8e4/0xb40
[  619.792957][ T2544]  chrdev_open+0x362/0x3d0
[  619.797364][ T2544]  do_dentry_open+0x52c/0x860
[  619.802049][ T2544]  vfs_open+0x43/0x50
[  619.806021][ T2544]  path_openat+0x170c/0x1f30
[  619.810602][ T2544]  do_filp_open+0x105/0x220
[  619.815096][ T2544]  do_sys_openat2+0xb5/0x2b0
[  619.819673][ T2544]  __x64_sys_openat+0xef/0x110
[  619.824422][ T2544]  do_syscall_64+0x44/0xd0
[  619.828838][ T2544]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  619.834724][ T2544] 
[  619.837034][ T2544] read to 0xffff88810711f5a8 of 4 bytes by task 2544 on cpu 0:
[  619.844558][ T2544]  n_tty_write+0x2e8/0xaf0
[  619.848963][ T2544]  file_tty_write+0x409/0x660
[  619.853647][ T2544]  tty_write+0x24/0x30
[  619.857714][ T2544]  vfs_write+0x7f5/0x950
[  619.861944][ T2544]  ksys_write+0xd9/0x190
[  619.866187][ T2544]  __x64_sys_write+0x3e/0x50
[  619.870762][ T2544]  do_syscall_64+0x44/0xd0
[  619.875162][ T2544]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  619.881039][ T2544] 
[  619.883347][ T2544] value changed: 0x00000001 -> 0x00000002
[  619.889053][ T2544] 
[  619.891362][ T2544] Reported by Kernel Concurrency Sanitizer on:
[  619.897494][ T2544] CPU: 0 PID: 2544 Comm: syz-executor.5 Not tainted 5.16.0-syzkaller #0
15:11:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x84200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x84200) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)

15:11:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00')
fchmod(r1, 0x4)

[  619.905807][ T2544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  619.915848][ T2544] ==================================================================
15:11:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x84200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x84200) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)

[  620.012514][   T24] audit: type=1400 audit(1642605116.684:476): avc:  denied  { setattr } for  pid=2552 comm="syz-executor.1" name="rt_cache" dev="proc" ino=4026532542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
15:11:56 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x100800) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r4, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001) (async)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x24080000}, 0x40048c4)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r6 = syz_open_pts(r0, 0x0)
dup3(r6, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:11:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x70641, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x5c87, 0x5}, {0x6, 0x7fff}, {0x6, 0x3ff}, {0x5, 0x2}]})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x6, 0x4, 0xffffffff, 0x7fffffff, 0x0, "36e7ca47d0689c7e265f781c9c8f36ad602a82"})
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
fcntl$setflags(r7, 0x2, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x7ff, 0x9, 0x7, 0x0, 0x8, "63371010f44a7a22c0f7f8ba5f98c7b44b4c83", 0x2, 0x7})
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:57 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="11020000", @ANYRES16=0x0, @ANYBLOB="0000000000130000000085b4963d1ff6fff874a00074d99199e9393d638a7c4934afe83a9a3d52cacef9c2001fe120565878e86b0fbaf4c065ede1d6098da09b39ae94730b24a40182601872fffbad2feb30dbf43add7da7afdfa4ee2b91cb983c41dfaa899d990a42403ce3a9474d24686812ec6b66ccc6d0950a0ec10f3f63ed19e3fedb612361a8b68258d8d9833267a75a71359dc2d9efd788e75d4666dfab10d10acf67c2084f22639dbb5f62c62e00000000000961000000000000"], 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
close_range(r3, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:57 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async)
epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001540)={0x4000200a}) (async)
ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000540)=""/4096) (async)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xb, 0x27, &(0x7f0000000140)}) (async)
r6 = syz_open_pts(r0, 0x0) (async)
r7 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r6, r7, 0x0) (async)
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

15:11:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00')
fchmod(r1, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') (async)
fchmod(r1, 0x4) (async)

15:11:57 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r4 = syz_open_pts(r3, 0x0)
r5 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = dup3(r4, r5, 0x0)
ioctl$TIOCSTI(r3, 0x541b, &(0x7f0000000000))
read(r4, &(0x7f00000001c0)=""/198, 0xc6)
r7 = fsmount(r0, 0x0, 0x70)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11)
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)

15:11:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) (async)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64)
r2 = epoll_create1(0x0) (async, rerun: 64)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x70641, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 64)
r4 = syz_open_pts(r3, 0x0) (rerun: 64)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x5c87, 0x5}, {0x6, 0x7fff}, {0x6, 0x3ff}, {0x5, 0x2}]})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x6, 0x4, 0xffffffff, 0x7fffffff, 0x0, "36e7ca47d0689c7e265f781c9c8f36ad602a82"})
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
fcntl$setflags(r7, 0x2, 0x1) (async)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x7ff, 0x9, 0x7, 0x0, 0x8, "63371010f44a7a22c0f7f8ba5f98c7b44b4c83", 0x2, 0x7})
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:58 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="11020000", @ANYRES16=0x0, @ANYBLOB="0000000000130000000085b4963d1ff6fff874a00074d99199e9393d638a7c4934afe83a9a3d52cacef9c2001fe120565878e86b0fbaf4c065ede1d6098da09b39ae94730b24a40182601872fffbad2feb30dbf43add7da7afdfa4ee2b91cb983c41dfaa899d990a42403ce3a9474d24686812ec6b66ccc6d0950a0ec10f3f63ed19e3fedb612361a8b68258d8d9833267a75a71359dc2d9efd788e75d4666dfab10d10acf67c2084f22639dbb5f62c62e00000000000961000000000000"], 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
close_range(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:58 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0x0, 0xffffffff, 0x10, "02ff00a9cd00000000000000000000000900"})
r3 = fsmount(0xffffffffffffffff, 0x0, 0x9)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)={0x7, 0x15, &(0x7f0000000140)})
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0xa39a, 0xffffd9aa})
syz_open_pts(r0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000540)={0xfa, 0x1, 0x80000000, 0x5, 0x11, "4c081d8c9c07aa33d4b7977424a9b61eb5116f"})
r6 = dup3(r1, r4, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)

15:11:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00')
fchmod(r1, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') (async)
fchmod(r1, 0x4) (async)

15:11:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080))

15:11:58 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r4 = syz_open_pts(r3, 0x0) (async)
r5 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r6 = dup3(r4, r5, 0x0) (async, rerun: 64)
ioctl$TIOCSTI(r3, 0x541b, &(0x7f0000000000)) (async)
read(r4, &(0x7f00000001c0)=""/198, 0xc6) (async)
r7 = fsmount(r0, 0x0, 0x70)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11)
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)

15:11:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) (async)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x70641, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x5c87, 0x5}, {0x6, 0x7fff}, {0x6, 0x3ff}, {0x5, 0x2}]}) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x6, 0x4, 0xffffffff, 0x7fffffff, 0x0, "36e7ca47d0689c7e265f781c9c8f36ad602a82"}) (async)
r6 = syz_open_pts(r0, 0x0)
r7 = dup3(r6, r0, 0x0)
fcntl$setflags(r7, 0x2, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x7ff, 0x9, 0x7, 0x0, 0x8, "63371010f44a7a22c0f7f8ba5f98c7b44b4c83", 0x2, 0x7}) (async)
read$eventfd(r7, &(0x7f0000000040), 0xfffffdef)

15:11:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "004000000000004000000004000000ab0700"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:58 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="11020000", @ANYRES16=0x0, @ANYBLOB="0000000000130000000085b4963d1ff6fff874a00074d99199e9393d638a7c4934afe83a9a3d52cacef9c2001fe120565878e86b0fbaf4c065ede1d6098da09b39ae94730b24a40182601872fffbad2feb30dbf43add7da7afdfa4ee2b91cb983c41dfaa899d990a42403ce3a9474d24686812ec6b66ccc6d0950a0ec10f3f63ed19e3fedb612361a8b68258d8d9833267a75a71359dc2d9efd788e75d4666dfab10d10acf67c2084f22639dbb5f62c62e00000000000961000000000000"], 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
close_range(r3, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:11:58 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0x0, 0xffffffff, 0x10, "02ff00a9cd00000000000000000000000900"})
r3 = fsmount(0xffffffffffffffff, 0x0, 0x9)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)={0x7, 0x15, &(0x7f0000000140)})
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0xa39a, 0xffffd9aa})
syz_open_pts(r0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000540)={0xfa, 0x1, 0x80000000, 0x5, 0x11, "4c081d8c9c07aa33d4b7977424a9b61eb5116f"})
r6 = dup3(r1, r4, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0x0, 0xffffffff, 0x10, "02ff00a9cd00000000000000000000000900"}) (async)
fsmount(0xffffffffffffffff, 0x0, 0x9) (async)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)={0x7, 0x15, &(0x7f0000000140)}) (async)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0xa39a, 0xffffd9aa}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
syz_open_pts(0xffffffffffffffff, 0x0) (async)
dup3(r5, 0xffffffffffffffff, 0x0) (async)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000540)={0xfa, 0x1, 0x80000000, 0x5, 0x11, "4c081d8c9c07aa33d4b7977424a9b61eb5116f"}) (async)
dup3(r1, r4, 0x0) (async)
read$eventfd(r6, &(0x7f0000000040), 0x8) (async)

15:11:59 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x4, 0x0, 0x0, 0xffffffff, 0x10, "02ff00a9cd00000000000000000000000900"}) (async, rerun: 64)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x9) (rerun: 64)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)={0x7, 0x15, &(0x7f0000000140)}) (async)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0xa39a, 0xffffd9aa}) (async, rerun: 64)
syz_open_pts(r0, 0x0) (async, rerun: 64)
socket$l2tp(0x2, 0x2, 0x73) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0) (async)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000540)={0xfa, 0x1, 0x80000000, 0x5, 0x11, "4c081d8c9c07aa33d4b7977424a9b61eb5116f"})
r6 = dup3(r1, r4, 0x0)
read$eventfd(r6, &(0x7f0000000040), 0x8)

15:11:59 executing program 5:
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:11:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080))

15:11:59 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 32)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (rerun: 32)
r4 = syz_open_pts(r3, 0x0) (async, rerun: 32)
r5 = io_uring_setup(0x2ba7, &(0x7f0000000180)) (rerun: 32)
close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r6 = dup3(r4, r5, 0x0) (async, rerun: 32)
ioctl$TIOCSTI(r3, 0x541b, &(0x7f0000000000))
read(r4, &(0x7f00000001c0)=""/198, 0xc6) (async)
r7 = fsmount(r0, 0x0, 0x70)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11)
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)

15:11:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "004000000000004000000004000000ab0700"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "004000000000004000000004000000ab0700"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:11:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e000000000000000000000976ecd400"})
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x8, 0xbaed, 0x0, 0xffffffff, 0x7, "ace97a19e1632dddde323637ff929372ac823e"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffb5)

15:11:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(0xffffffffffffffff, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:11:59 executing program 2:
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x99d, 0x0, 0x7, 0x7, 0x11, "3babf21948c1255e"})
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0xe405d3b}}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}], [{@smackfsroot}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@audit}, {@fowner_eq}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}})
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:12:00 executing program 5:
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r2, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)

15:12:00 executing program 5:
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async, rerun: 64)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = dup3(r1, r2, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

15:12:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080))

15:12:00 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x58}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x48180}, 0x4000800)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:12:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0) (async)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e000000000000000000000976ecd400"}) (async)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x8, 0xbaed, 0x0, 0xffffffff, 0x7, "ace97a19e1632dddde323637ff929372ac823e"}) (async)
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0) (async)
read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffb5)

15:12:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e000000000000000000000976ecd400"})
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x8, 0xbaed, 0x0, 0xffffffff, 0x7, "ace97a19e1632dddde323637ff929372ac823e"}) (async)
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0) (async)
read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffb5)

15:12:00 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(0xffffffffffffffff, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:12:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x100, 0x3, 0xfffffffd, 0x7fffffff, 0xe, "08000000d54ab7ec080000af3d95c5476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:00 executing program 2:
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x99d, 0x0, 0x7, 0x7, 0x11, "3babf21948c1255e"})
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0xe405d3b}}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}], [{@smackfsroot}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@audit}, {@fowner_eq}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}})
ioctl$TIOCSTI(r0, 0x541b, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x99d, 0x0, 0x7, 0x7, 0x11, "3babf21948c1255e"}) (async)
dup3(r1, r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x1, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0xe405d3b}}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}], [{@smackfsroot}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@audit}, {@fowner_eq}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0) (async)

15:12:00 executing program 2:
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x99d, 0x0, 0x7, 0x7, 0x11, "3babf21948c1255e"})
dup3(r1, r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0xe405d3b}}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}], [{@smackfsroot}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@audit}, {@fowner_eq}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}})
ioctl$TIOCSTI(r0, 0x541b, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "40a8f6e48ada8e9b"}}, 0x48}}, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "78220fcf8f61bc66"}}, 0x48}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x99d, 0x0, 0x7, 0x7, 0x11, "3babf21948c1255e"}) (async)
dup3(r1, r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x1, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0xe405d3b}}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}], [{@smackfsroot}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@audit}, {@fowner_eq}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0) (async)

15:12:00 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x3, 0x0, 0x1f, 0x8, 0xc, "43f1f9eb3d9f8d28a636b706b5bb65bc0bf9fe"})
r3 = epoll_create1(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1)
r7 = dup3(r1, r2, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0x8)

15:12:00 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x1001, 0x20, 0x10}, 0x18)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:12:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffc}}, './file0\x00'})
connect$phonet_pipe(r1, &(0x7f0000000100)={0x23, 0x4, 0x0, 0x2}, 0x10)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:12:01 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x58}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x48180}, 0x4000800) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:12:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(0xffffffffffffffff, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:12:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x100, 0x3, 0xfffffffd, 0x7fffffff, 0xe, "08000000d54ab7ec080000af3d95c5476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:01 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x3, 0x0, 0x1f, 0x8, 0xc, "43f1f9eb3d9f8d28a636b706b5bb65bc0bf9fe"}) (async)
r3 = epoll_create1(0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140))
ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1)
r7 = dup3(r1, r2, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0x8)

15:12:01 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x1001, 0x20, 0x10}, 0x18) (async)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:12:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffc}}, './file0\x00'})
connect$phonet_pipe(r1, &(0x7f0000000100)={0x23, 0x4, 0x0, 0x2}, 0x10)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) (async)
connect$phonet_pipe(r1, &(0x7f0000000100)={0x23, 0x4, 0x0, 0x2}, 0x10) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:12:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffc}}, './file0\x00'})
connect$phonet_pipe(r1, &(0x7f0000000100)={0x23, 0x4, 0x0, 0x2}, 0x10)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:12:01 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x58}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x48180}, 0x4000800)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r2 = syz_open_pts(r0, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x58}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x48180}, 0x4000800) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000)) (async)

15:12:02 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:12:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x100, 0x3, 0xfffffffd, 0x7fffffff, 0xe, "08000000d54ab7ec080000af3d95c5476e770d"}) (async, rerun: 64)
r1 = syz_open_pts(r0, 0x0) (rerun: 64)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = signalfd4(r0, &(0x7f0000000080)={[0x1ff]}, 0x8, 0x800)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x40007, 0x98, 0x7fffffff, 0x1b, "00000100"})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:12:02 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x3, 0x0, 0x1f, 0x8, 0xc, "43f1f9eb3d9f8d28a636b706b5bb65bc0bf9fe"}) (async, rerun: 32)
r3 = epoll_create1(0x0) (async, rerun: 32)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r5 = syz_open_pts(r4, 0x0)
r6 = dup3(r5, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000140)) (async)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) (async)
r7 = dup3(r1, r2, 0x0)
read$eventfd(r7, &(0x7f0000000040), 0x8)

15:12:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = signalfd4(r0, &(0x7f0000000080)={[0x1ff]}, 0x8, 0x800)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x40007, 0x98, 0x7fffffff, 0x1b, "00000100"})
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
signalfd4(r0, &(0x7f0000000080)={[0x1ff]}, 0x8, 0x800) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x40007, 0x98, 0x7fffffff, 0x1b, "00000100"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r2, r0, 0x0) (async)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef) (async)

15:12:02 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x1001, 0x20, 0x10}, 0x18)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:12:02 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x408000, 0x0)
syz_open_pts(r2, 0x1cfc2)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r3, 0x0)
r6 = io_uring_setup(0x68ae, &(0x7f0000000200)={0x0, 0xfb2f, 0x10, 0x1, 0x1c0})
syz_io_uring_setup(0x1844, &(0x7f0000000280)={0x0, 0xc5c1, 0x2, 0x2, 0x179, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340))
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:12:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r2, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x8})
r3 = syz_open_pts(r1, 0x0)
dup3(r3, r1, 0x0)
syz_open_pts(r3, 0xa902)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:12:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = signalfd4(r0, &(0x7f0000000080)={[0x1ff]}, 0x8, 0x800)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x40007, 0x98, 0x7fffffff, 0x1b, "00000100"}) (async)
r2 = syz_open_pts(r0, 0x0)
r3 = dup3(r2, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:12:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:12:03 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, "10a7df319c8524cfcde5a4a2cbcb03f0bcf0e8"})
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x1, "000100b5040400020000a5e654ef0d00"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
epoll_create1(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8a800, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="d800000000000000044fe0acc8040000868eec6d06d73a5d92fceb1656c2c3ffc5bdcf6da59403c1999ad8a0f788dabee3c7f6db7357c670b83298f385b1d4942610f55fd5943bb53b9aecc4d785e5282c622f07c7be1a8353b304fcebcf6d2650c740b43efabeca1ed015430d021944b974da2f1469ed72e3f9b84243849ba8224712257c1aed05d9d40666957a774230899d5fba1de9dc30f39e1dd8890e5be34fc3f8255192c1a492a4d9f8d66a0f37ca5cf28d79d87a675ef7b6d58e1fd6c63d36ed9600ba9eae3ffe7978773900000000000000000000000000000000f000000000000000150100007f00c76daac1991f75bd329e5e68039962aeccf8da6ec3aa46f94cdc48f95a89384ca6d39be2fbefd8113dedecfd539acf91ea80d0809634395b599be7021c9a2a2a170a4f8223653f1c04004537eb41b40b8f6a59dd6d48fccc453387c4f1081433fa20290089732e70a242cf235e4eb4482efd49903db65e15ea55280d79f4f9b65ca735a81db174a65e2e66b3207b5ee615cb93ab37819991c664634feaf5e519052c9537609f5233f742580baeb2e0030a7826d5f636c85cbdfd4d8f27673d85a523c1ab02a5fa90fd73cf329e7c62f0c6dd37490440a60ba23b817d64511a1b209445adf48ffd421a5f75626173d1601f6b2193034171fa12f41cc43a508741d96950b555df68c04dbcfe6da4f38bb2d5561773b1f9a29a6c0a639688c99a6f47e7f65f20407463494ca36a474ccc54e29913398d0be402327984a4db0cfa87d2fbab3cd93d8e6deb256f2f2ceb992937405a2e3532488289a156c88785c7efeec40d3354d00bf939745b6ffb760057672badbe47452f907dd33269e970be5910334df0505c60d06db70ce979ce966304e8240dd5245b68baec2eb66e46f11e045be4f7c2a15c0690dce8f50726997136156b21a325731dc7bbdc6744682c0f587df5e788be11305b"], 0x1c8}, 0x4040c80)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x8)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = dup3(r1, r7, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0x8)

15:12:03 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)
syz_open_pts(r1, 0x6080c0)

15:12:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r2, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x8})
r3 = syz_open_pts(r1, 0x0)
dup3(r3, r1, 0x0)
syz_open_pts(r3, 0xa902)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x8}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r3, r1, 0x0) (async)
syz_open_pts(r3, 0xa902) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:12:03 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = epoll_create1(0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x408000, 0x0)
syz_open_pts(r2, 0x1cfc2) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r3, 0x0) (async)
r6 = io_uring_setup(0x68ae, &(0x7f0000000200)={0x0, 0xfb2f, 0x10, 0x1, 0x1c0})
syz_io_uring_setup(0x1844, &(0x7f0000000280)={0x0, 0xc5c1, 0x2, 0x2, 0x179, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async)
dup3(r5, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:12:03 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:03 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async, rerun: 32)
r1 = epoll_create1(0x0) (async, rerun: 32)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x408000, 0x0)
syz_open_pts(r2, 0x1cfc2)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)) (async, rerun: 64)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0xff2e) (rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r5 = syz_open_pts(r3, 0x0) (async)
r6 = io_uring_setup(0x68ae, &(0x7f0000000200)={0x0, 0xfb2f, 0x10, 0x1, 0x1c0})
syz_io_uring_setup(0x1844, &(0x7f0000000280)={0x0, 0xc5c1, 0x2, 0x2, 0x179, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async, rerun: 32)
dup3(r5, r0, 0x0) (async, rerun: 32)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:12:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = io_uring_setup(0x2ba7, &(0x7f0000000180))
close_range(r2, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x8})
r3 = syz_open_pts(r1, 0x0)
dup3(r3, r1, 0x0)
syz_open_pts(r3, 0xa902)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
io_uring_setup(0x2ba7, &(0x7f0000000180)) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x8}) (async)
syz_open_pts(r1, 0x0) (async)
dup3(r3, r1, 0x0) (async)
syz_open_pts(r3, 0xa902) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

[  627.101459][ T2905] cgroup: fork rejected by pids controller in /syz3
15:12:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = memfd_create(&(0x7f0000000140)='/dev/ptmx\x00', 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc2})
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:12:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_open_pts(r2, 0x200)
r3 = dup3(r1, r0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0xfffffdef)

15:12:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, "10a7df319c8524cfcde5a4a2cbcb03f0bcf0e8"}) (async, rerun: 64)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0], 0xff2e) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r1 = syz_open_pts(r0, 0x0) (async)
r2 = epoll_create1(0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x1, "000100b5040400020000a5e654ef0d00"}) (async)
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8a800, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4040c80) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x8) (async, rerun: 32)
r7 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)
r8 = dup3(r1, r7, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0x8)

15:12:04 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)
syz_open_pts(r1, 0x6080c0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, 0x0) (async)
syz_open_pts(r1, 0x6080c0) (async)

15:12:04 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)
syz_open_pts(r1, 0x6080c0)

15:12:04 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (rerun: 64)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:04 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000000c009900040000000000c4bf40da8b86cfb86a687c89a915b80000"], 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x40001)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8)
getresuid(&(0x7f0000000580), &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000600))
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1002, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x1}}, {@fscache}, {@cache_none}, {@access_uid={'access', 0x3d, r1}}, {@dfltuid}], [{@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r2}}]}})
r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x42400, 0x38, 0x14}, 0x18)
r4 = io_uring_setup(0x2ba7, &(0x7f0000000180))
r5 = io_uring_setup(0x1565, &(0x7f0000000000))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x4, 0x20000000, r6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380))
getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r7 = syz_open_pts(r0, 0x0)
dup3(r7, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:12:04 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
dup3(r1, r0, 0x0) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)

15:12:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 64)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 64)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0) (async)
r3 = memfd_create(&(0x7f0000000140)='/dev/ptmx\x00', 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc2})
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:12:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
syz_open_pts(0xffffffffffffffff, 0x200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:04 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x47, 0x20, 0x8, 0x3a2, 0x40, 0xdf, 0xb507}, "77ecb53bd2a87469919548c29a3aa382eaecffc0a1b183eda2cdfd212932c5cbc404097c4ff91d7220061d63b32fac0eae38e07a421f560d0d51a6a2d80d8598684ad4ad8b53accf3eb5cb2c48ec50176e375640fe407a8a0977c8cccf1cd6130b9357b5efa184022471929b1b91296f0827f4247ddf6a2ff0de35f700d513672711fc6afc967ee040a915f27fd73054bff80c1a34dca9bc580465fb8dbba65a4faddc0afb49e031a96f3d29f5c1d8e1b8b04d9936294528cf84889e018131ddae3850b09fcc90ab", ['\x00', '\x00', '\x00', '\x00']}, 0x4e8)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_pts(r3, 0x101)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0xcabc, @dev={0xfe, 0x80, '\x00', 0x36}, 0x101}, @in={0x2, 0x6, @loopback}, @in={0x2, 0x4e23, @empty}], 0x5c)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:04 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async, rerun: 32)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async, rerun: 32)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x47, 0x20, 0x8, 0x3a2, 0x40, 0xdf, 0xb507}, "77ecb53bd2a87469919548c29a3aa382eaecffc0a1b183eda2cdfd212932c5cbc404097c4ff91d7220061d63b32fac0eae38e07a421f560d0d51a6a2d80d8598684ad4ad8b53accf3eb5cb2c48ec50176e375640fe407a8a0977c8cccf1cd6130b9357b5efa184022471929b1b91296f0827f4247ddf6a2ff0de35f700d513672711fc6afc967ee040a915f27fd73054bff80c1a34dca9bc580465fb8dbba65a4faddc0afb49e031a96f3d29f5c1d8e1b8b04d9936294528cf84889e018131ddae3850b09fcc90ab", ['\x00', '\x00', '\x00', '\x00']}, 0x4e8) (async)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_pts(r3, 0x101)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0xcabc, @dev={0xfe, 0x80, '\x00', 0x36}, 0x101}, @in={0x2, 0x6, @loopback}, @in={0x2, 0x4e23, @empty}], 0x5c) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, "10a7df319c8524cfcde5a4a2cbcb03f0bcf0e8"})
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x1, "000100b5040400020000a5e654ef0d00"})
r4 = syz_open_pts(r3, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140))
epoll_create1(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8a800, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="d800000000000000044fe0acc8040000868eec6d06d73a5d92fceb1656c2c3ffc5bdcf6da59403c1999ad8a0f788dabee3c7f6db7357c670b83298f385b1d4942610f55fd5943bb53b9aecc4d785e5282c622f07c7be1a8353b304fcebcf6d2650c740b43efabeca1ed015430d021944b974da2f1469ed72e3f9b84243849ba8224712257c1aed05d9d40666957a774230899d5fba1de9dc30f39e1dd8890e5be34fc3f8255192c1a492a4d9f8d66a0f37ca5cf28d79d87a675ef7b6d58e1fd6c63d36ed9600ba9eae3ffe7978773900000000000000000000000000000000f000000000000000150100007f00c76daac1991f75bd329e5e68039962aeccf8da6ec3aa46f94cdc48f95a89384ca6d39be2fbefd8113dedecfd539acf91ea80d0809634395b599be7021c9a2a2a170a4f8223653f1c04004537eb41b40b8f6a59dd6d48fccc453387c4f1081433fa20290089732e70a242cf235e4eb4482efd49903db65e15ea55280d79f4f9b65ca735a81db174a65e2e66b3207b5ee615cb93ab37819991c664634feaf5e519052c9537609f5233f742580baeb2e0030a7826d5f636c85cbdfd4d8f27673d85a523c1ab02a5fa90fd73cf329e7c62f0c6dd37490440a60ba23b817d64511a1b209445adf48ffd421a5f75626173d1601f6b2193034171fa12f41cc43a508741d96950b555df68c04dbcfe6da4f38bb2d5561773b1f9a29a6c0a639688c99a6f47e7f65f20407463494ca36a474ccc54e29913398d0be402327984a4db0cfa87d2fbab3cd93d8e6deb256f2f2ceb992937405a2e3532488289a156c88785c7efeec40d3354d00bf939745b6ffb760057672badbe47452f907dd33269e970be5910334df0505c60d06db70ce979ce966304e8240dd5245b68baec2eb66e46f11e045be4f7c2a15c0690dce8f50726997136156b21a325731dc7bbdc6744682c0f587df5e788be11305b"], 0x1c8}, 0x4040c80)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x8)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = dup3(r1, r7, 0x0)
read$eventfd(r8, &(0x7f0000000040), 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, "10a7df319c8524cfcde5a4a2cbcb03f0bcf0e8"}) (async)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r0, 0x0) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x1, "000100b5040400020000a5e654ef0d00"}) (async)
syz_open_pts(r3, 0x0) (async)
dup3(r4, r3, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)) (async)
epoll_create1(0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8a800, 0x0) (async)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="d800000000000000044fe0acc8040000868eec6d06d73a5d92fceb1656c2c3ffc5bdcf6da59403c1999ad8a0f788dabee3c7f6db7357c670b83298f385b1d4942610f55fd5943bb53b9aecc4d785e5282c622f07c7be1a8353b304fcebcf6d2650c740b43efabeca1ed015430d021944b974da2f1469ed72e3f9b84243849ba8224712257c1aed05d9d40666957a774230899d5fba1de9dc30f39e1dd8890e5be34fc3f8255192c1a492a4d9f8d66a0f37ca5cf28d79d87a675ef7b6d58e1fd6c63d36ed9600ba9eae3ffe7978773900000000000000000000000000000000f000000000000000150100007f00c76daac1991f75bd329e5e68039962aeccf8da6ec3aa46f94cdc48f95a89384ca6d39be2fbefd8113dedecfd539acf91ea80d0809634395b599be7021c9a2a2a170a4f8223653f1c04004537eb41b40b8f6a59dd6d48fccc453387c4f1081433fa20290089732e70a242cf235e4eb4482efd49903db65e15ea55280d79f4f9b65ca735a81db174a65e2e66b3207b5ee615cb93ab37819991c664634feaf5e519052c9537609f5233f742580baeb2e0030a7826d5f636c85cbdfd4d8f27673d85a523c1ab02a5fa90fd73cf329e7c62f0c6dd37490440a60ba23b817d64511a1b209445adf48ffd421a5f75626173d1601f6b2193034171fa12f41cc43a508741d96950b555df68c04dbcfe6da4f38bb2d5561773b1f9a29a6c0a639688c99a6f47e7f65f20407463494ca36a474ccc54e29913398d0be402327984a4db0cfa87d2fbab3cd93d8e6deb256f2f2ceb992937405a2e3532488289a156c88785c7efeec40d3354d00bf939745b6ffb760057672badbe47452f907dd33269e970be5910334df0505c60d06db70ce979ce966304e8240dd5245b68baec2eb66e46f11e045be4f7c2a15c0690dce8f50726997136156b21a325731dc7bbdc6744682c0f587df5e788be11305b"], 0x1c8}, 0x4040c80) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x8) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
dup3(r1, r7, 0x0) (async)
read$eventfd(r8, &(0x7f0000000040), 0x8) (async)

15:12:05 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000082ff0102000099000400000000000000"], 0x20}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r3 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r3, r3, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:12:05 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x29c}}, './file0\x00'})
bind$802154_dgram(r0, &(0x7f00000005c0), 0x14)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x680)
r3 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000580)=0x4)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000600)={0xfffffeff, 0x81, 0x8000, 0x1, 0x2, "5748da65c8c92dbf497ad9ae246bda92d890d6"})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast1, @private=0xa010101, 0x2, 0xffffffff}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 0x5, 0x4, {@mac=@local, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, {[0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x6, 0x4, 0x5, 0x7f, 0x327c, 'team_slave_0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @private=0xa010102, @remote, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r5 = dup3(r2, r3, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000680)={0x5, 0x3, 0x42, 0x90e, 0x16, "f7d5bbf8ebc8497ad5601cc42dc695c4840528"})

15:12:05 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000082ff0102000099000400000000000000"], 0x20}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r3 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r3, r3, 0x0) (async)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:12:05 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000082ff0102000099000400000000000000"], 0x20}}, 0x0) (async)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x58, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x58}}, 0x24008001)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
r3 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r3, r3, 0x0) (async)
ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0)

15:12:05 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000000c009900040000000000c4bf40da8b86cfb86a687c89a915b80000"], 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x40001) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8)
getresuid(&(0x7f0000000580), &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000600))
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1002, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x1}}, {@fscache}, {@cache_none}, {@access_uid={'access', 0x3d, r1}}, {@dfltuid}], [{@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r2}}]}})
r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x42400, 0x38, 0x14}, 0x18) (async, rerun: 64)
r4 = io_uring_setup(0x2ba7, &(0x7f0000000180)) (rerun: 64)
r5 = io_uring_setup(0x1565, &(0x7f0000000000))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x4, 0x20000000, r6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) (async)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380)) (async, rerun: 64)
getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async, rerun: 64)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"}) (async)
r7 = syz_open_pts(r0, 0x0)
dup3(r7, r0, 0x0) (async)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))

15:12:05 executing program 2:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140))
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x11)
r5 = syz_open_pts(r0, 0x0)
dup3(r5, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, 0x0)

15:12:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
r3 = memfd_create(&(0x7f0000000140)='/dev/ptmx\x00', 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc2})
dup3(r2, r1, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (async)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
syz_open_pts(r1, 0x0) (async)
memfd_create(&(0x7f0000000140)='/dev/ptmx\x00', 0x2) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc2}) (async)
dup3(r2, r1, 0x0) (async)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"}) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"}) (async)

15:12:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x1a, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
syz_open_pts(0xffffffffffffffff, 0x200)
r2 = dup3(r1, r0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)

15:12:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "717b2379e1b866964e4e15dca5b916506505a0"})
r1 = epoll_create1(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x6, 0x3, 0x80000001, 0x1000, 0x6, "0aff3048ac2cf9e1b42522cbb07e2070da93f1"})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)={0x10})
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080))
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x3f, 0x0, "bbec037a294ae3353ba7f145bbcc3c2e4389c8"})

15:12:05 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = syz_open_pts(r0, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x47, 0x20, 0x8, 0x3a2, 0x40, 0xdf, 0xb507}, "77ecb53bd2a87469919548c29a3aa382eaecffc0a1b183eda2cdfd212932c5cbc404097c4ff91d7220061d63b32fac0eae38e07a421f560d0d51a6a2d80d8598684ad4ad8b53accf3eb5cb2c48ec50176e375640fe407a8a0977c8cccf1cd6130b9357b5efa184022471929b1b91296f0827f4247ddf6a2ff0de35f700d513672711fc6afc967ee040a915f27fd73054bff80c1a34dca9bc580465fb8dbba65a4faddc0afb49e031a96f3d29f5c1d8e1b8b04d9936294528cf84889e018131ddae3850b09fcc90ab", ['\x00', '\x00', '\x00', '\x00']}, 0x4e8)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_pts(r3, 0x101)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0xcabc, @dev={0xfe, 0x80, '\x00', 0x36}, 0x101}, @in={0x2, 0x6, @loopback}, @in={0x2, 0x4e23, @empty}], 0x5c)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"}) (async)
syz_open_pts(r0, 0x0) (async)
write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0x47, 0x20, 0x8, 0x3a2, 0x40, 0xdf, 0xb507}, "77ecb53bd2a87469919548c29a3aa382eaecffc0a1b183eda2cdfd212932c5cbc404097c4ff91d7220061d63b32fac0eae38e07a421f560d0d51a6a2d80d8598684ad4ad8b53accf3eb5cb2c48ec50176e375640fe407a8a0977c8cccf1cd6130b9357b5efa184022471929b1b91296f0827f4247ddf6a2ff0de35f700d513672711fc6afc967ee040a915f27fd73054bff80c1a34dca9bc580465fb8dbba65a4faddc0afb49e031a96f3d29f5c1d8e1b8b04d9936294528cf84889e018131ddae3850b09fcc90ab", ['\x00', '\x00', '\x00', '\x00']}, 0x4e8) (async)
dup3(r1, r0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
syz_open_pts(r3, 0x101) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0xcabc, @dev={0xfe, 0x80, '\x00', 0x36}, 0x101}, @in={0x2, 0x6, @loopback}, @in={0x2, 0x4e23, @empty}], 0x5c) (async)
read$eventfd(r2, &(0x7f0000000040), 0xfffffdef) (async)

15:12:05 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7fffffff, 0x0, "47dab9abd54ab7ec7d3ff8e93d95c1476e770d"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
r3 = syz_open_pts(r0, 0x4a0000)
r4 = dup3(r3, r0, 0x0)
read$eventfd(r4, &(0x7f0000000040), 0xfffffdef)
syz_open_pts(r3, 0x2)

15:12:06 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x29c}}, './file0\x00'})
bind$802154_dgram(r0, &(0x7f00000005c0), 0x14) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x0, "2ba7ce319c8524cfcde5a4a2d8cb03f0b4f0e8"}) (async)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"}) (async)
r2 = syz_open_pts(r1, 0x680) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000580)=0x4) (async)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000600)={0xfffffeff, 0x81, 0x8000, 0x1, 0x2, "5748da65c8c92dbf497ad9ae246bda92d890d6"}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast1, @private=0xa010101, 0x2, 0xffffffff}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 0x5, 0x4, {@mac=@local, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, {[0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x6, 0x4, 0x5, 0x7f, 0x327c, 'team_slave_0\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @private=0xa010102, @remote, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r5 = dup3(r2, r3, 0x0)
read$eventfd(r5, &(0x7f0000000040), 0x8) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c81fcf76000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0) (async)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000680)={0x5, 0x3, 0x42, 0x90e, 0x16, "f7d5bbf8ebc8497ad5601cc42dc695c4840528"})

15:12:06 executing program 3:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000820000000c009900040000000000c4bf40da8b86cfb86a687c89a915b80000"], 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x40001)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8)
getresuid(&(0x7f0000000580), &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000600))
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1002, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x1}}, {@fscache}, {@cache_none}, {@access_uid={'access', 0x3d, r1}}, {@dfltuid}], [{@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r2}}]}})
r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x42400, 0x38, 0x14}, 0x18)
r4 = io_uring_setup(0x2ba7, &(0x7f0000000180))
r5 = io_uring_setup(0x1565, &(0x7f0000000000))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x4, 0x20000000, r6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380))
getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00407a90847088d94d286000"})
r7 = syz_open_pts(r0, 0x0)
dup3(r7, r0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000000))
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0