r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) poll(&(0x7f0000000000)=[{r0}, {0xffffffffffffffff, 0x8788}], 0x2, 0x3)